ram 2: ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), &(0x7f0000000380)=0x4) io_uring_setup(0x3fd7, &(0x7f0000000300)={0x0, 0x925e, 0x10, 0x1, 0x190}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0xc201, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000004c0)=0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = accept(r2, 0x0, &(0x7f00000003c0)) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x0, 0xfcae}, 0x40010000) 16:23:22 executing program 1: socketpair(0x2, 0x6, 0x1ee, &(0x7f00000002c0)) 16:23:22 executing program 3: socketpair(0x2, 0x6, 0x1f3, &(0x7f00000002c0)) 16:23:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x7fffffff, {}, {0x4, 0x2, 0x1f, 0x9, 0xf9, 0x20, "87ef8b0b"}, 0xff, 0x2, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:22 executing program 3: socketpair(0x2, 0x6, 0x1f4, &(0x7f00000002c0)) 16:23:22 executing program 1: socketpair(0x2, 0x6, 0x1ef, &(0x7f00000002c0)) 16:23:22 executing program 0: socketpair(0x22, 0x3, 0xd2, &(0x7f00000002c0)) 16:23:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x7fffffff, {}, {0x4, 0x2, 0x1f, 0x9, 0xf9, 0x20, "87ef8b0b"}, 0xff, 0x2, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:22 executing program 3: socketpair(0x2, 0x6, 0x1f5, &(0x7f00000002c0)) 16:23:22 executing program 1: socketpair(0x2, 0x6, 0x1f0, &(0x7f00000002c0)) 16:23:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x3, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x408080, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20000800) 16:23:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x4, 0x2, 0x1f, 0x9, 0xf9, 0x20, "87ef8b0b"}, 0xff, 0x2, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:23 executing program 1: socketpair(0x2, 0x6, 0x1f1, &(0x7f00000002c0)) 16:23:23 executing program 0: socketpair(0x22, 0x3, 0xd3, &(0x7f00000002c0)) 16:23:23 executing program 3: socketpair(0x2, 0x6, 0x1f6, &(0x7f00000002c0)) 16:23:23 executing program 2: socketpair(0x22, 0x3, 0xd2, &(0x7f00000002c0)) 16:23:23 executing program 1: socketpair(0x2, 0x6, 0x1f2, &(0x7f00000002c0)) 16:23:23 executing program 0: socketpair(0x22, 0x3, 0xd4, &(0x7f00000002c0)) 16:23:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:23:23 executing program 3: socketpair(0x2, 0x6, 0x1f7, &(0x7f00000002c0)) 16:23:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x1f, 0x9, 0xf9, 0x20, "87ef8b0b"}, 0xff, 0x2, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:23 executing program 1: socketpair(0x2, 0x6, 0x1f3, &(0x7f00000002c0)) 16:23:24 executing program 5: setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x80, 0x2, 0x4, 0x20, 0x9, {0x0, 0xea60}, {0x3, 0xc, 0x2, 0x0, 0x9, 0x6, "7839fc1d"}, 0x8, 0x4, @fd=0xffffffffffffffff, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x59dadede, 0x0, 0x4, 0x0, 0x10000, {}, {0x1, 0x0, 0x6, 0x5, 0x2, 0x7, "98ea3b51"}, 0x7, 0x3, @fd=r1, 0xb84}) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xffffffffffffff5b}, 0x12041) 16:23:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:23:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x1f, 0x9, 0xf9, 0x20, "87ef8b0b"}, 0xff, 0x2, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:24 executing program 0: socketpair(0x22, 0x3, 0xd5, &(0x7f00000002c0)) 16:23:24 executing program 3: socketpair(0x2, 0x6, 0x1f8, &(0x7f00000002c0)) 16:23:24 executing program 1: socketpair(0x2, 0x6, 0x1f4, &(0x7f00000002c0)) 16:23:24 executing program 0: socketpair(0x22, 0x3, 0xd6, &(0x7f00000002c0)) 16:23:24 executing program 1: socketpair(0x2, 0x6, 0x1f5, &(0x7f00000002c0)) 16:23:24 executing program 3: socketpair(0x2, 0x6, 0x1f9, &(0x7f00000002c0)) 16:23:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:23:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x9, 0xf9, 0x20, "87ef8b0b"}, 0xff, 0x2, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) 16:23:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xf9, 0x20, "87ef8b0b"}, 0xff, 0x2, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:24 executing program 1: socketpair(0x2, 0x6, 0x1f6, &(0x7f00000002c0)) 16:23:24 executing program 3: socketpair(0x2, 0x6, 0x1fa, &(0x7f00000002c0)) 16:23:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) 16:23:24 executing program 0: socketpair(0x22, 0x3, 0xd7, &(0x7f00000002c0)) 16:23:24 executing program 3: socketpair(0x2, 0x6, 0x1fb, &(0x7f00000002c0)) 16:23:24 executing program 1: socketpair(0x2, 0x6, 0x1f7, &(0x7f00000002c0)) 16:23:24 executing program 0: socketpair(0x22, 0x3, 0xd8, &(0x7f00000002c0)) 16:23:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20, "87ef8b0b"}, 0xff, 0x2, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) 16:23:25 executing program 3: socketpair(0x2, 0x6, 0x1fc, &(0x7f00000002c0)) 16:23:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:25 executing program 1: socketpair(0x2, 0x6, 0x1f8, &(0x7f00000002c0)) 16:23:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 16:23:25 executing program 0: socketpair(0x22, 0x3, 0xd9, &(0x7f00000002c0)) 16:23:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0xff, 0x2, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:25 executing program 3: socketpair(0x2, 0x6, 0x1fd, &(0x7f00000002c0)) 16:23:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 16:23:25 executing program 1: socketpair(0x2, 0x6, 0x1f9, &(0x7f00000002c0)) 16:23:25 executing program 3: socketpair(0x2, 0x6, 0x1fe, &(0x7f00000002c0)) 16:23:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x2, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 16:23:25 executing program 0: socketpair(0x22, 0x3, 0xda, &(0x7f00000002c0)) 16:23:26 executing program 0: socketpair(0x22, 0x3, 0xdb, &(0x7f00000002c0)) 16:23:26 executing program 1: socketpair(0x2, 0x6, 0x1fa, &(0x7f00000002c0)) 16:23:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) 16:23:26 executing program 3: socketpair(0x2, 0x6, 0x201, &(0x7f00000002c0)) 16:23:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0x7f}, 0x3000000}) 16:23:26 executing program 0: socketpair(0x22, 0x3, 0xdc, &(0x7f00000002c0)) 16:23:26 executing program 1: socketpair(0x2, 0x6, 0x1fb, &(0x7f00000002c0)) 16:23:26 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 16:23:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0, 0x3000000}) 16:23:26 executing program 3: socketpair(0x2, 0x6, 0x300, &(0x7f00000002c0)) 16:23:26 executing program 0: socketpair(0x22, 0x3, 0xdd, &(0x7f00000002c0)) 16:23:26 executing program 1: socketpair(0x2, 0x6, 0x1fc, &(0x7f00000002c0)) 16:23:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 16:23:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:27 executing program 3: socketpair(0x2, 0x6, 0x301, &(0x7f00000002c0)) 16:23:27 executing program 0: socketpair(0x22, 0x3, 0xde, &(0x7f00000002c0)) 16:23:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 16:23:27 executing program 1: socketpair(0x2, 0x6, 0x1fd, &(0x7f00000002c0)) 16:23:27 executing program 5: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x10480, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) recvmsg$can_raw(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)={0x0, 0xb, 0x22}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x4, 0x3, 0xf6, 0x9, 0xd3a, 0x100000001, 0x6, 0xffffffff, 0x100, 0x4, 0x7, 0x7ff, 0x8, 0x5}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)={0x7fffffff, 0x0, 0x4, 0x1057c78b09fecf32, 0x6, {0x77359400}, {0x4, 0x8, 0x9, 0xff, 0x8, 0x2, "20a11514"}, 0x2, 0x2, @fd=r1, 0x8000, 0x0, r4}) 16:23:27 executing program 0: socketpair(0x22, 0x3, 0xdf, &(0x7f00000002c0)) 16:23:27 executing program 1: socketpair(0x2, 0x6, 0x1fe, &(0x7f00000002c0)) 16:23:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:27 executing program 3: socketpair(0x2, 0x6, 0x500, &(0x7f00000002c0)) 16:23:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 16:23:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000980)="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", &(0x7f0000000000)=@tcp6=r2, 0x2}, 0x20) 16:23:27 executing program 1: socketpair(0x2, 0x6, 0x201, &(0x7f00000002c0)) 16:23:27 executing program 3: socketpair(0x2, 0x6, 0x501, &(0x7f00000002c0)) 16:23:27 executing program 0: socketpair(0x22, 0x3, 0xe0, &(0x7f00000002c0)) 16:23:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:27 executing program 3: socketpair(0x2, 0x6, 0x600, &(0x7f00000002c0)) 16:23:27 executing program 1: socketpair(0x2, 0x6, 0x300, &(0x7f00000002c0)) 16:23:27 executing program 0: socketpair(0x22, 0x3, 0xe1, &(0x7f00000002c0)) 16:23:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 16:23:28 executing program 3: socketpair(0x2, 0x6, 0x601, &(0x7f00000002c0)) 16:23:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:28 executing program 1: socketpair(0x2, 0x6, 0x301, &(0x7f00000002c0)) 16:23:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 16:23:28 executing program 0: socketpair(0x22, 0x3, 0xe2, &(0x7f00000002c0)) 16:23:28 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 16:23:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:28 executing program 3: socketpair(0x2, 0x6, 0x700, &(0x7f00000002c0)) 16:23:28 executing program 1: socketpair(0x2, 0x6, 0x500, &(0x7f00000002c0)) 16:23:28 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 16:23:28 executing program 0: socketpair(0x22, 0x3, 0xe3, &(0x7f00000002c0)) 16:23:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:28 executing program 1: socketpair(0x2, 0x6, 0x501, &(0x7f00000002c0)) 16:23:28 executing program 3: socketpair(0x2, 0x6, 0x701, &(0x7f00000002c0)) 16:23:28 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 16:23:29 executing program 4: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:29 executing program 1: socketpair(0x2, 0x6, 0x600, &(0x7f00000002c0)) 16:23:29 executing program 0: socketpair(0x22, 0x3, 0xe4, &(0x7f00000002c0)) 16:23:29 executing program 3: socketpair(0x2, 0x6, 0x801, &(0x7f00000002c0)) 16:23:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 16:23:29 executing program 5: getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0xe945) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) [ 2221.561309][ T3245] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.567810][ T3245] ieee802154 phy1 wpan1: encryption failed: -22 16:23:29 executing program 3: socketpair(0x2, 0x6, 0x900, &(0x7f00000002c0)) 16:23:29 executing program 0: socketpair(0x22, 0x3, 0xe5, &(0x7f00000002c0)) 16:23:29 executing program 4: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:29 executing program 1: socketpair(0x2, 0x6, 0x601, &(0x7f00000002c0)) 16:23:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 16:23:29 executing program 3: socketpair(0x2, 0x6, 0x901, &(0x7f00000002c0)) 16:23:29 executing program 4: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 16:23:29 executing program 0: socketpair(0x22, 0x3, 0xe6, &(0x7f00000002c0)) 16:23:29 executing program 1: socketpair(0x2, 0x6, 0x700, &(0x7f00000002c0)) 16:23:29 executing program 2: socketpair(0x2, 0x6, 0x1fc, &(0x7f00000002c0)) 16:23:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51}, 0x0) 16:23:30 executing program 3: socketpair(0x2, 0x6, 0xa00, &(0x7f00000002c0)) 16:23:30 executing program 4: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:30 executing program 0: socketpair(0x22, 0x3, 0xe7, &(0x7f00000002c0)) 16:23:30 executing program 1: socketpair(0x2, 0x6, 0x701, &(0x7f00000002c0)) 16:23:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) socketpair(0xf, 0x6, 0x80, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0xf9db99c4c163049d}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x57e}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000003c0)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r4, r5, r0], 0x3) 16:23:30 executing program 4: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:30 executing program 0: socketpair(0x22, 0x3, 0xe8, &(0x7f00000002c0)) 16:23:30 executing program 1: socketpair(0x2, 0x6, 0x801, &(0x7f00000002c0)) 16:23:30 executing program 3: socketpair(0x2, 0x6, 0xa01, &(0x7f00000002c0)) 16:23:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) socketpair(0xf, 0x6, 0x80, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0xf9db99c4c163049d}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x57e}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000003c0)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r4, r5, r0], 0x3) 16:23:30 executing program 0: socketpair(0x22, 0x3, 0xe9, &(0x7f00000002c0)) 16:23:31 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x880) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"8575b432e38981109b70107cd4592209", 0x0, 0x0, {0x3, 0x4}, {0xffffffff, 0x6c}, 0xff, [0xcc0c, 0x3927, 0x17af, 0x6, 0x5, 0x414, 0x8, 0x401, 0x64, 0x0, 0xefb, 0x10001, 0x6, 0x6, 0x2a8, 0x5]}) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:31 executing program 4: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000001, 0x30, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x700000) 16:23:31 executing program 1: socketpair(0x2, 0x6, 0x900, &(0x7f00000002c0)) 16:23:31 executing program 3: socketpair(0x2, 0x6, 0xb00, &(0x7f00000002c0)) 16:23:31 executing program 0: socketpair(0x22, 0x3, 0xea, &(0x7f00000002c0)) 16:23:31 executing program 3: socketpair(0x2, 0x6, 0xb01, &(0x7f00000002c0)) 16:23:31 executing program 1: socketpair(0x2, 0x6, 0x901, &(0x7f00000002c0)) 16:23:31 executing program 4: syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:31 executing program 0: socketpair(0x22, 0x3, 0xeb, &(0x7f00000002c0)) 16:23:31 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x10000, 0x7c, 0xfff, 0x1f, 0xd85f, 0x2, 0x2, 0x9, 0x7fff, 0x6f, 0x2, 0x3142c373, 0x7, 0x5}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xf9db99c4c163049d, 0x0, 0xffffffff}, 0x14}}, 0x4048005) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x200440d0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) syz_open_dev$mouse(&(0x7f0000000100), 0x3, 0x121c80) 16:23:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0xf9db99c4c163049d}, 0x14}}, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x80000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x8000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2]}, 0x2) 16:23:31 executing program 0: socketpair(0x22, 0x3, 0xec, &(0x7f00000002c0)) 16:23:31 executing program 3: socketpair(0x2, 0x6, 0xc00, &(0x7f00000002c0)) 16:23:31 executing program 1: socketpair(0x2, 0x6, 0xa00, &(0x7f00000002c0)) 16:23:31 executing program 4: syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:31 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:31 executing program 3: socketpair(0x2, 0x6, 0xc01, &(0x7f00000002c0)) 16:23:32 executing program 0: socketpair(0x22, 0x3, 0xed, &(0x7f00000002c0)) 16:23:32 executing program 1: socketpair(0x2, 0x6, 0xa01, &(0x7f00000002c0)) 16:23:32 executing program 4: syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:32 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:32 executing program 0: socketpair(0x22, 0x3, 0xee, &(0x7f00000002c0)) 16:23:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000000)="8e8482d9b441e31e43f67184ab4aa888e255d92420a701ae79fbb0a28f19c853eac2f46c2f4b", &(0x7f0000000040)=""/39, &(0x7f0000000080)="adfba18dc77f37a11f5f2e6b3b6f500985e4e7a3b0856e3fa5f14df1a6a3655325416787cf44f1e2a72713df38679a3cdaa89e0d8048dfcf82afcbf1", &(0x7f00000000c0)="ed5419a235cb8c6ac77fa5b2843ffb262e3bd0ec90149def085b5b7d312b41329ed0b6ab3aeefeefe3f57aeb409311e43d41905a31f1588addb1f607d0b9b896d353401c79f24fd080be707f8fbd0ba4c3ee4f5a7f68a9adc605cb2bbc964245a39d3b7345b97864bd27732a686c7f3326e244015864401ac40d35b42d045daeb059749d3e911ad9586825805cadd832bc0bbe8db4f5131605e51abe4d", 0x6, r1}, 0x38) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:32 executing program 3: socketpair(0x2, 0x6, 0xd00, &(0x7f00000002c0)) 16:23:32 executing program 1: socketpair(0x2, 0x6, 0xb00, &(0x7f00000002c0)) 16:23:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 16:23:32 executing program 0: socketpair(0x22, 0x3, 0xef, &(0x7f00000002c0)) 16:23:32 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:32 executing program 1: socketpair(0x2, 0x6, 0xb01, &(0x7f00000002c0)) 16:23:32 executing program 3: socketpair(0x2, 0x6, 0xd01, &(0x7f00000002c0)) 16:23:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 16:23:32 executing program 0: socketpair(0x22, 0x3, 0xf0, &(0x7f00000002c0)) 16:23:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0xf9db99c4c163049d}, 0x14}}, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x80000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x8000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2]}, 0x2) 16:23:32 executing program 3: socketpair(0x2, 0x6, 0xe00, &(0x7f00000002c0)) 16:23:33 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x7fffffff, 0x6, 0x4, 0x4040, 0x9, {r1, r2/1000+10000}, {0x4, 0x0, 0x1, 0x0, 0x4, 0xff, "e2ac5c2f"}, 0x8, 0x2, @userptr=0x2, 0x8}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:33 executing program 1: socketpair(0x2, 0x6, 0xc00, &(0x7f00000002c0)) 16:23:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 16:23:33 executing program 0: socketpair(0x22, 0x3, 0xf1, &(0x7f00000002c0)) 16:23:33 executing program 3: socketpair(0x2, 0x6, 0xe01, &(0x7f00000002c0)) 16:23:33 executing program 3: socketpair(0x2, 0x6, 0xf00, &(0x7f00000002c0)) 16:23:33 executing program 1: socketpair(0x2, 0x6, 0xc01, &(0x7f00000002c0)) 16:23:33 executing program 0: socketpair(0x22, 0x3, 0xf2, &(0x7f00000002c0)) 16:23:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:33 executing program 3: socketpair(0x2, 0x6, 0xf01, &(0x7f00000002c0)) 16:23:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 16:23:33 executing program 1: socketpair(0x2, 0x6, 0xd00, &(0x7f00000002c0)) 16:23:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 16:23:34 executing program 0: socketpair(0x22, 0x3, 0xf3, &(0x7f00000002c0)) 16:23:34 executing program 3: socketpair(0x2, 0x6, 0x1001, &(0x7f00000002c0)) 16:23:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:34 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 16:23:34 executing program 1: socketpair(0x2, 0x6, 0xd01, &(0x7f00000002c0)) 16:23:34 executing program 3: socketpair(0x2, 0x6, 0x1100, &(0x7f00000002c0)) 16:23:34 executing program 0: socketpair(0x22, 0x3, 0xf4, &(0x7f00000002c0)) 16:23:34 executing program 2: socketpair(0x2, 0x6, 0xf01, &(0x7f00000002c0)) 16:23:34 executing program 1: socketpair(0x2, 0x6, 0xe00, &(0x7f00000002c0)) 16:23:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "87ef8b0b"}, 0x0, 0x0, @planes=0x0}) 16:23:34 executing program 3: socketpair(0x2, 0x6, 0x1101, &(0x7f00000002c0)) 16:23:35 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x43, 0x0}, 0x0) 16:23:35 executing program 1: socketpair(0x2, 0x6, 0xe01, &(0x7f00000002c0)) 16:23:35 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:35 executing program 0: socketpair(0x22, 0x3, 0xf5, &(0x7f00000002c0)) 16:23:35 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:35 executing program 3: socketpair(0x2, 0x6, 0x1200, &(0x7f00000002c0)) 16:23:35 executing program 1: socketpair(0x2, 0x6, 0xf00, &(0x7f00000002c0)) 16:23:35 executing program 0: socketpair(0x22, 0x3, 0xf6, &(0x7f00000002c0)) 16:23:35 executing program 3: socketpair(0x2, 0x6, 0x1201, &(0x7f00000002c0)) 16:23:35 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:35 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:35 executing program 1: socketpair(0x2, 0x6, 0xf01, &(0x7f00000002c0)) 16:23:36 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) 16:23:36 executing program 0: socketpair(0x22, 0x3, 0xf7, &(0x7f00000002c0)) 16:23:36 executing program 3: socketpair(0x2, 0x6, 0x1300, &(0x7f00000002c0)) 16:23:36 executing program 1: socketpair(0x2, 0x6, 0x1001, &(0x7f00000002c0)) 16:23:36 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r2, r3, r3, r4], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r5) 16:23:36 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r2, r3, r3, r4], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r5) 16:23:36 executing program 1: socketpair(0x2, 0x6, 0x1100, &(0x7f00000002c0)) 16:23:36 executing program 3: socketpair(0x2, 0x6, 0x1301, &(0x7f00000002c0)) 16:23:36 executing program 0: socketpair(0x22, 0x3, 0xf8, &(0x7f00000002c0)) 16:23:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"a3264dc98ac68b3fd067991dac45293b", 0x0, 0x0, {0x40, 0x7fff}, {0x8, 0x6}, 0x0, [0x200, 0x4, 0x7, 0x2, 0x1, 0x1, 0x1, 0x10ead484, 0x0, 0x9, 0x4766, 0x400, 0x4, 0x9, 0x1, 0xbb]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000340)={"5fa786aa479d2da78ced49d6247d59c7", r2, r3, {0x1, 0xfffff75f}, {0x80000000, 0x8}, 0x2ccf, [0x5cc, 0x7, 0x10000, 0x2, 0xc, 0x544a, 0xffffffffffffffc0, 0x7fffffff, 0xeaa, 0x573a, 0x8, 0x9, 0x2b, 0x2, 0x10001, 0x6]}) 16:23:36 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r4, r4, r5], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x382180) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:36 executing program 1: socketpair(0x2, 0x6, 0x1101, &(0x7f00000002c0)) 16:23:36 executing program 3: socketpair(0x2, 0x6, 0x1400, &(0x7f00000002c0)) 16:23:36 executing program 0: socketpair(0x22, 0x3, 0xf9, &(0x7f00000002c0)) 16:23:36 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r4, r4, r5], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:36 executing program 1: socketpair(0x2, 0x6, 0x1200, &(0x7f00000002c0)) 16:23:36 executing program 0: socketpair(0x22, 0x3, 0xfa, &(0x7f00000002c0)) 16:23:37 executing program 3: socketpair(0x2, 0x6, 0x1401, &(0x7f00000002c0)) 16:23:37 executing program 2: socketpair(0x22, 0x3, 0x56, &(0x7f00000002c0)) 16:23:37 executing program 1: socketpair(0x2, 0x6, 0x1201, &(0x7f00000002c0)) 16:23:37 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, 0xffffffffffffffff, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:37 executing program 0: socketpair(0x22, 0x3, 0xfb, &(0x7f00000002c0)) 16:23:37 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000c00)=0xec) bind$can_raw(r1, &(0x7f0000000c40)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x3) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x618000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r4, 0xc01064c1, &(0x7f0000000100)={0x0, 0x0, r0}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), 0x4) 16:23:37 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, 0xffffffffffffffff, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:37 executing program 3: socketpair(0x2, 0x6, 0x1500, &(0x7f00000002c0)) 16:23:37 executing program 1: socketpair(0x2, 0x6, 0x1300, &(0x7f00000002c0)) 16:23:37 executing program 2: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r3 = syz_io_uring_setup(0x7, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r2, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=@rc, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1ff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x14a400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x7f26, 0x198, 0xffff, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, r7, 0x1, 0x2, 0x1}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@ptr={0xe}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x80000001}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10, 0x3}, {0x5, 0x2}, {0x2, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x5}}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x30, 0x30]}}, &(0x7f0000000140)=""/212, 0x89, 0xd4}, 0x20) recvmsg$can_raw(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) 16:23:37 executing program 0: socketpair(0x22, 0x3, 0xfc, &(0x7f00000002c0)) 16:23:37 executing program 0: socketpair(0x22, 0x3, 0xfd, &(0x7f00000002c0)) 16:23:37 executing program 3: socketpair(0x2, 0x6, 0x1501, &(0x7f00000002c0)) 16:23:37 executing program 1: socketpair(0x2, 0x6, 0x1301, &(0x7f00000002c0)) 16:23:37 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, 0xffffffffffffffff, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0xa000, 0x82, 0x2}, 0x18) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x5, 0x1, 0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x102, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r4, &(0x7f0000000300)="8b4ea3cef88800d9de7167766123ad82d832a25704ed8592f290d35831328901c9dfc7f47875fe94d7a083e315c073bd0a615d2ffb880197562e3234066ec3301c14186209fc43a06bfc533bc3c97ff28af1dfc61127914079ca0aedb68dac5fd7ed105b0615abdc1c6807190b2f1ca0c93a37f7a20331436772331fa9d8ac9b8c79a6ee2ec71d048d6f8f04918d545b572dc439b854e35447c2b6212c6e9214c430898e508a2c10cd076825343a89cce21fd0b6db917c6ae60cd548b5"}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000200)={0x0, 0x0, 0x0, r3, 0x2}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000440)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, @mcast2, 0x0, 0x20, 0x5, 0x2}}) accept(r1, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80) 16:23:37 executing program 0: socketpair(0x22, 0x3, 0xfe, &(0x7f00000002c0)) 16:23:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x141020, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f00000002c0)=0x4) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) 16:23:38 executing program 3: socketpair(0x2, 0x6, 0x1600, &(0x7f00000002c0)) 16:23:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0xf9db99c4c163049d}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x44}}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) 16:23:38 executing program 1: socketpair(0x2, 0x6, 0x1400, &(0x7f00000002c0)) 16:23:38 executing program 0: socketpair(0x22, 0x3, 0x102, &(0x7f00000002c0)) 16:23:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0xf9db99c4c163049d}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x44}}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) 16:23:38 executing program 1: socketpair(0x2, 0x6, 0x1401, &(0x7f00000002c0)) 16:23:38 executing program 3: socketpair(0x2, 0x6, 0x1601, &(0x7f00000002c0)) 16:23:38 executing program 0: socketpair(0x22, 0x3, 0x103, &(0x7f00000002c0)) 16:23:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x2, 0xa1, 0x8, 0x800, 0x1, 0xbe14, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x40) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0x9, 0xe, 0x4, 0x4d, 0x4, {}, {0x3, 0xc, 0x9, 0x7, 0x40, 0x7f, "e101cca2"}, 0x80000000, 0x2, @planes=&(0x7f0000000000)={0x7ff, 0x10000, @fd, 0x5}, 0x77}) 16:23:38 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x7, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x7, 0x0, 0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x1000, 0x0, {0x0, r5}}, 0x8) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) socket$inet(0x2, 0x80000, 0x7ff) 16:23:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:39 executing program 0: socketpair(0x22, 0x3, 0x104, &(0x7f00000002c0)) 16:23:39 executing program 3: socketpair(0x2, 0x6, 0x1700, &(0x7f00000002c0)) 16:23:39 executing program 1: socketpair(0x2, 0x6, 0x1500, &(0x7f00000002c0)) 16:23:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19, 0x0, 0xfff, 0x6, 0x20, 0x1, 0x0, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x40) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000240)="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", &(0x7f00000001c0)=""/72}, 0x20) 16:23:39 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r4) 16:23:39 executing program 3: socketpair(0x2, 0x6, 0x1701, &(0x7f00000002c0)) 16:23:39 executing program 0: socketpair(0x22, 0x3, 0x105, &(0x7f00000002c0)) 16:23:39 executing program 1: socketpair(0x2, 0x6, 0x1501, &(0x7f00000002c0)) 16:23:39 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:39 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:39 executing program 0: socketpair(0x22, 0x3, 0x106, &(0x7f00000002c0)) 16:23:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 16:23:40 executing program 3: socketpair(0x2, 0x6, 0x1800, &(0x7f00000002c0)) 16:23:40 executing program 1: socketpair(0x2, 0x6, 0x1600, &(0x7f00000002c0)) 16:23:40 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:40 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:40 executing program 0: socketpair(0x22, 0x3, 0x107, &(0x7f00000002c0)) 16:23:40 executing program 1: socketpair(0x2, 0x6, 0x1601, &(0x7f00000002c0)) 16:23:40 executing program 3: socketpair(0x2, 0x6, 0x1801, &(0x7f00000002c0)) 16:23:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x52e0, &(0x7f00000003c0)={0x0, 0xa114, 0x4, 0x1, 0x1d6}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x0, 0x0, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @private0, 0x0, 0x8, 0x5, 0x2}}) socketpair(0x1e, 0xa, 0x40, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000980)={{0x0, 0x80000000, 0x5b2, 0x3f, 0x8, 0x6, 0x5, 0x2, 0x1, 0x8, 0x9, 0x40, 0x26d7, 0x3, 0x20}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000100)=[r8, r8, r3, r6, r0, 0xffffffffffffffff, r0, r1]}, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0x4}, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', r7, 0x4, 0x1f, 0x3, 0x80000001, 0x0, @empty, @mcast2, 0x700, 0x1, 0x8, 0x1}}) 16:23:40 executing program 0: socketpair(0x22, 0x3, 0x108, &(0x7f00000002c0)) 16:23:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x7) 16:23:40 executing program 3: socketpair(0x2, 0x6, 0x1900, &(0x7f00000002c0)) 16:23:41 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2000) socket$inet_udplite(0x2, 0x2, 0x88) 16:23:41 executing program 1: socketpair(0x2, 0x6, 0x1700, &(0x7f00000002c0)) 16:23:41 executing program 3: socketpair(0x2, 0x6, 0x1901, &(0x7f00000002c0)) 16:23:41 executing program 0: socketpair(0x22, 0x3, 0x109, &(0x7f00000002c0)) 16:23:41 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', 0x0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:41 executing program 1: socketpair(0x2, 0x6, 0x1701, &(0x7f00000002c0)) 16:23:41 executing program 3: socketpair(0x2, 0x6, 0x1a00, &(0x7f00000002c0)) 16:23:41 executing program 0: socketpair(0x22, 0x3, 0x10a, &(0x7f00000002c0)) 16:23:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 16:23:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x60002121) 16:23:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x7) 16:23:41 executing program 1: socketpair(0x2, 0x6, 0x1800, &(0x7f00000002c0)) 16:23:41 executing program 3: socketpair(0x2, 0x6, 0x1a01, &(0x7f00000002c0)) 16:23:41 executing program 0: socketpair(0x22, 0x3, 0x10b, &(0x7f00000002c0)) 16:23:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x60002121) 16:23:41 executing program 1: socketpair(0x2, 0x6, 0x1801, &(0x7f00000002c0)) 16:23:41 executing program 3: socketpair(0x2, 0x6, 0x1b00, &(0x7f00000002c0)) 16:23:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x60002121) 16:23:42 executing program 0: socketpair(0x22, 0x3, 0x10c, &(0x7f00000002c0)) 16:23:42 executing program 3: socketpair(0x2, 0x6, 0x1b01, &(0x7f00000002c0)) 16:23:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000000)=""/255, &(0x7f0000000100)=0xff) 16:23:42 executing program 0: socketpair(0x22, 0x3, 0x10d, &(0x7f00000002c0)) 16:23:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x7) 16:23:42 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x60002121) 16:23:42 executing program 1: socketpair(0x2, 0x6, 0x1900, &(0x7f00000002c0)) 16:23:42 executing program 3: socketpair(0x2, 0x6, 0x1c00, &(0x7f00000002c0)) 16:23:42 executing program 0: socketpair(0x22, 0x3, 0x10e, &(0x7f00000002c0)) 16:23:42 executing program 3: socketpair(0x2, 0x6, 0x1c01, &(0x7f00000002c0)) 16:23:42 executing program 1: socketpair(0x2, 0x6, 0x1901, &(0x7f00000002c0)) 16:23:42 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x60002121) 16:23:42 executing program 3: socketpair(0x2, 0x6, 0x1d00, &(0x7f00000002c0)) 16:23:42 executing program 0: socketpair(0x22, 0x3, 0x10f, &(0x7f00000002c0)) 16:23:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208001, 0x88, 0x1}, 0x18) 16:23:43 executing program 0: socketpair(0x22, 0x3, 0x110, &(0x7f00000002c0)) 16:23:43 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x7) 16:23:43 executing program 1: socketpair(0x2, 0x6, 0x1a00, &(0x7f00000002c0)) 16:23:43 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x60002121) 16:23:43 executing program 3: socketpair(0x2, 0x6, 0x1d01, &(0x7f00000002c0)) 16:23:43 executing program 0: socketpair(0x22, 0x3, 0x111, &(0x7f00000002c0)) 16:23:43 executing program 3: socketpair(0x2, 0x6, 0x1e00, &(0x7f00000002c0)) 16:23:43 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x7) 16:23:43 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x60002121) 16:23:43 executing program 1: socketpair(0x2, 0x6, 0x1a01, &(0x7f00000002c0)) 16:23:43 executing program 0: socketpair(0x22, 0x3, 0x112, &(0x7f00000002c0)) 16:23:44 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x7) 16:23:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x60002121) 16:23:44 executing program 1: socketpair(0x2, 0x6, 0x1b00, &(0x7f00000002c0)) 16:23:44 executing program 0: socketpair(0x22, 0x3, 0x113, &(0x7f00000002c0)) 16:23:44 executing program 3: socketpair(0x2, 0x6, 0x1e01, &(0x7f00000002c0)) 16:23:44 executing program 0: socketpair(0x22, 0x3, 0x114, &(0x7f00000002c0)) 16:23:44 executing program 1: socketpair(0x2, 0x6, 0x1b01, &(0x7f00000002c0)) 16:23:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x60002121) 16:23:44 executing program 3: socketpair(0x2, 0x6, 0x1f00, &(0x7f00000002c0)) 16:23:44 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x7) 16:23:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000580)={0x1f, @none, 0xc8}, 0xa) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f0000000080)=""/202, 0xca}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/102, 0x66}, {&(0x7f0000000400)=""/135, 0x87}], 0x7) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000980)={0x0, 0x6}) 16:23:44 executing program 0: socketpair(0x22, 0x3, 0x115, &(0x7f00000002c0)) 16:23:44 executing program 3: socketpair(0x2, 0x6, 0x1f01, &(0x7f00000002c0)) 16:23:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x60002121) 16:23:44 executing program 1: socketpair(0x2, 0x6, 0x1c00, &(0x7f00000002c0)) 16:23:44 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x7) 16:23:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x60002121) 16:23:44 executing program 0: socketpair(0x22, 0x3, 0x116, &(0x7f00000002c0)) 16:23:45 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x7) 16:23:45 executing program 3: socketpair(0x2, 0x6, 0x2000, &(0x7f00000002c0)) 16:23:45 executing program 1: socketpair(0x2, 0x6, 0x1c01, &(0x7f00000002c0)) 16:23:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x60002121) 16:23:45 executing program 5: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x38) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x142) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) 16:23:45 executing program 3: socketpair(0x2, 0x6, 0x2001, &(0x7f00000002c0)) 16:23:45 executing program 0: socketpair(0x22, 0x3, 0x117, &(0x7f00000002c0)) 16:23:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x7) 16:23:45 executing program 1: socketpair(0x2, 0x6, 0x1d00, &(0x7f00000002c0)) 16:23:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:45 executing program 1: socketpair(0x2, 0x6, 0x1d01, &(0x7f00000002c0)) 16:23:45 executing program 3: socketpair(0x2, 0x6, 0x2100, &(0x7f00000002c0)) 16:23:45 executing program 0: socketpair(0x22, 0x3, 0x118, &(0x7f00000002c0)) 16:23:45 executing program 1: socketpair(0x2, 0x6, 0x1e00, &(0x7f00000002c0)) 16:23:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x7) 16:23:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2) 16:23:45 executing program 1: socketpair(0x2, 0x6, 0x1e01, &(0x7f00000002c0)) 16:23:45 executing program 3: socketpair(0x2, 0x6, 0x2101, &(0x7f00000002c0)) 16:23:45 executing program 1: socketpair(0x2, 0x6, 0x1f00, &(0x7f00000002c0)) 16:23:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x7) 16:23:45 executing program 0: socketpair(0x22, 0x3, 0x119, &(0x7f00000002c0)) 16:23:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:46 executing program 3: socketpair(0x2, 0x6, 0x2200, &(0x7f00000002c0)) 16:23:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:46 executing program 1: socketpair(0x2, 0x6, 0x1f01, &(0x7f00000002c0)) 16:23:46 executing program 0: socketpair(0x22, 0x3, 0x11a, &(0x7f00000002c0)) 16:23:46 executing program 3: socketpair(0x2, 0x6, 0x2201, &(0x7f00000002c0)) 16:23:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0xf9db99c4c163049d}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x5) syz_open_dev$loop(&(0x7f0000000040), 0x81, 0xbbc4fe4b0a1228ac) 16:23:46 executing program 1: socketpair(0x2, 0x6, 0x2000, &(0x7f00000002c0)) 16:23:46 executing program 0: socketpair(0x22, 0x3, 0x11b, &(0x7f00000002c0)) 16:23:46 executing program 3: socketpair(0x2, 0x6, 0x2300, &(0x7f00000002c0)) 16:23:46 executing program 1: socketpair(0x2, 0x6, 0x2001, &(0x7f00000002c0)) 16:23:46 executing program 3: socketpair(0x2, 0x6, 0x2301, &(0x7f00000002c0)) 16:23:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:47 executing program 0: socketpair(0x22, 0x3, 0x11c, &(0x7f00000002c0)) 16:23:47 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4, 0x1) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) recvmsg$can_raw(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0xfc, 0x3f, 0x1, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x7fc0, 0x1, 0x5}}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x1d, r3}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)=@canfd={{0x1}, 0x1e, 0x0, 0x0, 0x0, "788e762eec4ac7b30fcb681f1325c33ff6616975bef94110e40dcec0dde137a17c2d6bb3be96bd2c3e3c18f802b43bce20a2bf80f53efec227f86e3dea570bc3"}, 0x48}}, 0x0) 16:23:47 executing program 3: socketpair(0x2, 0x6, 0x2400, &(0x7f00000002c0)) 16:23:47 executing program 1: socketpair(0x2, 0x6, 0x2100, &(0x7f00000002c0)) 16:23:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:47 executing program 3: socketpair(0x2, 0x6, 0x2401, &(0x7f00000002c0)) 16:23:47 executing program 0: socketpair(0x22, 0x3, 0x11d, &(0x7f00000002c0)) 16:23:47 executing program 3: socketpair(0x2, 0x6, 0x2500, &(0x7f00000002c0)) 16:23:47 executing program 1: socketpair(0x2, 0x6, 0x2101, &(0x7f00000002c0)) 16:23:47 executing program 0: socketpair(0x22, 0x3, 0x11e, &(0x7f00000002c0)) 16:23:47 executing program 3: socketpair(0x2, 0x6, 0x2501, &(0x7f00000002c0)) 16:23:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:48 executing program 1: socketpair(0x2, 0x6, 0x2200, &(0x7f00000002c0)) 16:23:48 executing program 3: socketpair(0x2, 0x6, 0x2600, &(0x7f00000002c0)) 16:23:48 executing program 0: socketpair(0x22, 0x3, 0x11f, &(0x7f00000002c0)) 16:23:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:48 executing program 1: socketpair(0x2, 0x6, 0x2201, &(0x7f00000002c0)) 16:23:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/clear_refs\x00', 0x1, 0x0) socket$inet(0x2, 0x4, 0x1ea) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000340)=0x1, 0x4) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000600)="16efe431f834a9f4231d7ea878418fc5801c47363f2590256a54301ddd6b936be2dba5751ef96ba8fcb32d03f513ca07d1ff77efa69f11202b099849d5ebe4c8c756c855bad0b207b7094ffc35994de80bd6d856e5d1813d90cf1a023d42bce63b3918a5b30bda89abc1811c13457c1bfb266f522f2adba91315ad5cdc3248f3a32488bd89366a1ccd4d08cc4b6e4e985183d54f56b88b81695a500b8dc7c14c917cb52b7c2d9f7a475a5bc16cd3ee38b0376705b5aed9760b6d22623bf6b73484a8c8681081f0f0e73c2c6afcd727725823c95727", &(0x7f0000000580)=""/69, &(0x7f0000000540)="ea7e9d4197f8c6d7023cd8cacb66e7efc2b0e8e11f42cab5a856b3784a", &(0x7f0000000240)="f4d1d0f26e94a80f81e748323bbc99a63aa865159a5efbc2ef1f97ef57d2f460ebb9d310ab6291929997a0a8cf07d8958d993b82b0019147cceb2340cd38963b7a3ff0bd2d0331b975f79d1d3d95be8166c60d01d74d2e0833b2d18a30b07618e8", 0xf3dc, r2, 0x4}, 0x38) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14105) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000500), 0x4) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000400), &(0x7f0000000440)=0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x200040, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000003c0), 0x4) 16:23:48 executing program 3: socketpair(0x2, 0x6, 0x2601, &(0x7f00000002c0)) 16:23:48 executing program 0: socketpair(0x22, 0x3, 0x120, &(0x7f00000002c0)) 16:23:48 executing program 1: socketpair(0x2, 0x6, 0x2300, &(0x7f00000002c0)) 16:23:48 executing program 3: socketpair(0x2, 0x6, 0x2700, &(0x7f00000002c0)) 16:23:48 executing program 1: socketpair(0x2, 0x6, 0x2301, &(0x7f00000002c0)) 16:23:49 executing program 1: socketpair(0x2, 0x6, 0x2400, &(0x7f00000002c0)) 16:23:49 executing program 0: socketpair(0x22, 0x3, 0x121, &(0x7f00000002c0)) 16:23:49 executing program 3: socketpair(0x2, 0x6, 0x2701, &(0x7f00000002c0)) 16:23:49 executing program 2: socketpair(0x2, 0x6, 0x2200, &(0x7f00000002c0)) 16:23:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 16:23:49 executing program 0: socketpair(0x22, 0x3, 0x122, &(0x7f00000002c0)) 16:23:49 executing program 3: socketpair(0x2, 0x6, 0x2800, &(0x7f00000002c0)) 16:23:49 executing program 1: socketpair(0x2, 0x6, 0x2401, &(0x7f00000002c0)) 16:23:49 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:49 executing program 5: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/78, 0x4e}], 0x5, &(0x7f0000000980)=""/4096, 0x1000}, 0x40000060) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:49 executing program 1: socketpair(0x2, 0x6, 0x2500, &(0x7f00000002c0)) 16:23:49 executing program 0: socketpair(0x22, 0x3, 0x123, &(0x7f00000002c0)) 16:23:49 executing program 3: socketpair(0x2, 0x6, 0x2801, &(0x7f00000002c0)) 16:23:49 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/clear_refs\x00', 0x1, 0x0) socket$inet(0x2, 0x4, 0x1ea) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000340)=0x1, 0x4) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000600)="16efe431f834a9f4231d7ea878418fc5801c47363f2590256a54301ddd6b936be2dba5751ef96ba8fcb32d03f513ca07d1ff77efa69f11202b099849d5ebe4c8c756c855bad0b207b7094ffc35994de80bd6d856e5d1813d90cf1a023d42bce63b3918a5b30bda89abc1811c13457c1bfb266f522f2adba91315ad5cdc3248f3a32488bd89366a1ccd4d08cc4b6e4e985183d54f56b88b81695a500b8dc7c14c917cb52b7c2d9f7a475a5bc16cd3ee38b0376705b5aed9760b6d22623bf6b73484a8c8681081f0f0e73c2c6afcd727725823c95727", &(0x7f0000000580)=""/69, &(0x7f0000000540)="ea7e9d4197f8c6d7023cd8cacb66e7efc2b0e8e11f42cab5a856b3784a", &(0x7f0000000240)="f4d1d0f26e94a80f81e748323bbc99a63aa865159a5efbc2ef1f97ef57d2f460ebb9d310ab6291929997a0a8cf07d8958d993b82b0019147cceb2340cd38963b7a3ff0bd2d0331b975f79d1d3d95be8166c60d01d74d2e0833b2d18a30b07618e8", 0xf3dc, r2, 0x4}, 0x38) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14105) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000500), 0x4) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000400), &(0x7f0000000440)=0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x200040, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000003c0), 0x4) 16:23:49 executing program 1: socketpair(0x2, 0x6, 0x2501, &(0x7f00000002c0)) 16:23:49 executing program 3: socketpair(0x2, 0x6, 0x2900, &(0x7f00000002c0)) 16:23:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 16:23:50 executing program 0: socketpair(0x22, 0x3, 0x124, &(0x7f00000002c0)) 16:23:50 executing program 1: socketpair(0x2, 0x6, 0x2600, &(0x7f00000002c0)) 16:23:50 executing program 3: socketpair(0x2, 0x6, 0x2901, &(0x7f00000002c0)) 16:23:50 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x26, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x40000003) 16:23:50 executing program 0: socketpair(0x22, 0x3, 0x125, &(0x7f00000002c0)) 16:23:50 executing program 3: socketpair(0x2, 0x6, 0x2a00, &(0x7f00000002c0)) 16:23:50 executing program 1: socketpair(0x2, 0x6, 0x2601, &(0x7f00000002c0)) 16:23:50 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40012001) 16:23:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:50 executing program 0: socketpair(0x22, 0x3, 0x126, &(0x7f00000002c0)) 16:23:50 executing program 1: socketpair(0x2, 0x6, 0x2700, &(0x7f00000002c0)) 16:23:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 16:23:51 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc080, 0x0) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x40) 16:23:51 executing program 0: socketpair(0x22, 0x3, 0x127, &(0x7f00000002c0)) 16:23:51 executing program 1: socketpair(0x2, 0x6, 0x2701, &(0x7f00000002c0)) 16:23:51 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:51 executing program 3: socketpair(0x2, 0x6, 0x2a01, &(0x7f00000002c0)) 16:23:51 executing program 0: socketpair(0x22, 0x3, 0x128, &(0x7f00000002c0)) 16:23:51 executing program 3: socketpair(0x2, 0x6, 0x2b00, &(0x7f00000002c0)) 16:23:51 executing program 1: socketpair(0x2, 0x6, 0x2800, &(0x7f00000002c0)) 16:23:51 executing program 0: socketpair(0x22, 0x3, 0x129, &(0x7f00000002c0)) 16:23:51 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc080, 0x0) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x40) 16:23:51 executing program 3: socketpair(0x2, 0x6, 0x2b01, &(0x7f00000002c0)) 16:23:51 executing program 1: socketpair(0x2, 0x6, 0x2801, &(0x7f00000002c0)) 16:23:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) 16:23:52 executing program 0: socketpair(0x22, 0x3, 0x12a, &(0x7f00000002c0)) 16:23:52 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc080, 0x0) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x40) 16:23:52 executing program 1: socketpair(0x2, 0x6, 0x2900, &(0x7f00000002c0)) 16:23:52 executing program 3: socketpair(0x2, 0x6, 0x2c00, &(0x7f00000002c0)) 16:23:52 executing program 3: socketpair(0x2, 0x6, 0x2c01, &(0x7f00000002c0)) 16:23:52 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc080, 0x0) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x40) 16:23:52 executing program 1: socketpair(0x2, 0x6, 0x2901, &(0x7f00000002c0)) 16:23:52 executing program 0: socketpair(0x22, 0x3, 0x12b, &(0x7f00000002c0)) 16:23:52 executing program 3: socketpair(0x2, 0x6, 0x2d00, &(0x7f00000002c0)) 16:23:52 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc080, 0x0) 16:23:52 executing program 1: socketpair(0x2, 0x6, 0x2a00, &(0x7f00000002c0)) 16:23:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) 16:23:53 executing program 0: socketpair(0x22, 0x3, 0x12c, &(0x7f00000002c0)) 16:23:53 executing program 3: socketpair(0x2, 0x6, 0x2d01, &(0x7f00000002c0)) 16:23:53 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc080, 0x0) 16:23:53 executing program 1: socketpair(0x2, 0x6, 0x2a01, &(0x7f00000002c0)) 16:23:53 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0xc080, 0x0) 16:23:53 executing program 1: socketpair(0x2, 0x6, 0x2b00, &(0x7f00000002c0)) 16:23:53 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) 16:23:53 executing program 0: socketpair(0x22, 0x3, 0x12d, &(0x7f00000002c0)) 16:23:53 executing program 3: socketpair(0x2, 0x6, 0x2e00, &(0x7f00000002c0)) 16:23:53 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0xc080, 0x0) 16:23:53 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) 16:23:53 executing program 0: socketpair(0x22, 0x3, 0x12e, &(0x7f00000002c0)) 16:23:53 executing program 1: socketpair(0x2, 0x6, 0x2b01, &(0x7f00000002c0)) 16:23:53 executing program 3: socketpair(0x2, 0x6, 0x2e01, &(0x7f00000002c0)) 16:23:53 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0xc080, 0x0) 16:23:53 executing program 0: socketpair(0x22, 0x3, 0x12f, &(0x7f00000002c0)) 16:23:53 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) 16:23:53 executing program 1: socketpair(0x2, 0x6, 0x2c00, &(0x7f00000002c0)) 16:23:53 executing program 3: socketpair(0x2, 0x6, 0x2f00, &(0x7f00000002c0)) 16:23:53 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) 16:23:53 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16:23:53 executing program 0: socketpair(0x22, 0x3, 0x130, &(0x7f00000002c0)) 16:23:53 executing program 1: socketpair(0x2, 0x6, 0x2c01, &(0x7f00000002c0)) 16:23:53 executing program 3: socketpair(0x2, 0x6, 0x2f01, &(0x7f00000002c0)) 16:23:53 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) 16:23:53 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16:23:53 executing program 0: socketpair(0x22, 0x3, 0x131, &(0x7f00000002c0)) 16:23:53 executing program 1: socketpair(0x2, 0x6, 0x2d00, &(0x7f00000002c0)) 16:23:54 executing program 3: socketpair(0x2, 0x6, 0x3000, &(0x7f00000002c0)) 16:23:54 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) 16:23:54 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16:23:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 16:23:54 executing program 3: socketpair(0x2, 0x6, 0x3001, &(0x7f00000002c0)) 16:23:54 executing program 0: socketpair(0x22, 0x3, 0x132, &(0x7f00000002c0)) 16:23:54 executing program 1: socketpair(0x2, 0x6, 0x2d01, &(0x7f00000002c0)) 16:23:54 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:54 executing program 3: socketpair(0x2, 0x6, 0x3100, &(0x7f00000002c0)) 16:23:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:54 executing program 0: socketpair(0x22, 0x3, 0x133, &(0x7f00000002c0)) 16:23:54 executing program 1: socketpair(0x2, 0x6, 0x2e00, &(0x7f00000002c0)) 16:23:54 executing program 3: socketpair(0x2, 0x6, 0x3101, &(0x7f00000002c0)) 16:23:54 executing program 4: socketpair(0x2, 0x6, 0x152, &(0x7f00000002c0)) 16:23:54 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:54 executing program 0: socketpair(0x22, 0x3, 0x134, &(0x7f00000002c0)) 16:23:54 executing program 1: socketpair(0x2, 0x6, 0x2e01, &(0x7f00000002c0)) 16:23:54 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x6, 0x8, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x40, 0xf39, 0x2}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x2002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000063b40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000063d40)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000063f40)={{0x0, 0xef5a, 0x80000000, 0x65, 0x400, 0x1, 0x7fffffff, 0x3f, 0x1, 0x8, 0x200, 0xc0de, 0x7, 0x4, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000064f40)={{0x0, 0xa5, 0x800, 0x400, 0x8000, 0x3, 0xffffffff, 0x7cab4bb1, 0x5, 0x1f, 0x9, 0x5, 0x3f, 0x69}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000064fc0)={{0x0, 0x5, 0x5, 0xbc, 0x8, 0xf681, 0x1, 0x2, 0x3, 0x7fffffff, 0xffff, 0x6, 0xfffffffffffff92a, 0x10000, 0x1000}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000065080)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000065280)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000065480)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "e51162330904de"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000066480)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000066680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000066880)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000066a80)={{0x0, 0x10001, 0x20, 0x0, 0x20, 0xfffffffffffffff9, 0x0, 0x1000, 0x510b, 0x10001, 0x1, 0x7515, 0x3, 0x3b, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000067a80)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "8f80fb96c9ced0"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000068a80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {r4}, {r5}, {r6, r7}, {r8}, {0x0, r9}, {r10}, {}, {}, {0x0, r11}, {}, {r12}, {r13}, {}, {}, {}, {r14}], 0x1, "8c56b3181d89cf"}) sendmsg$can_raw(r1, &(0x7f0000000680)={&(0x7f0000000580), 0x10, &(0x7f0000000640)={&(0x7f00000005c0)=@canfd={{}, 0x33, 0x2, 0x0, 0x0, "543d5435f5f05b864a843b362080769885b069403547a1e7114ca061aa199ac420460c0d51caee57631023889be7bfef949b47a9d6061c8d8b36a33f4b51819c"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 16:23:54 executing program 0: socketpair(0x22, 0x3, 0x135, &(0x7f00000002c0)) 16:23:54 executing program 3: socketpair(0x2, 0x6, 0x3200, &(0x7f00000002c0)) 16:23:54 executing program 2: socketpair(0x2, 0x6, 0x150, &(0x7f00000002c0)) 16:23:54 executing program 1: socketpair(0x2, 0x6, 0x2f00, &(0x7f00000002c0)) 16:23:54 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:54 executing program 0: socketpair(0x22, 0x3, 0x136, &(0x7f00000002c0)) 16:23:54 executing program 3: socketpair(0x2, 0x6, 0x3201, &(0x7f00000002c0)) 16:23:55 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:55 executing program 1: socketpair(0x2, 0x6, 0x2f01, &(0x7f00000002c0)) 16:23:55 executing program 0: socketpair(0x22, 0x3, 0x137, &(0x7f00000002c0)) 16:23:55 executing program 3: socketpair(0x2, 0x6, 0x3300, &(0x7f00000002c0)) 16:23:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x20400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0, r1, r0], 0x3) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x4, 0x4420) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000006b00)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x111, 0x6}}, 0x20) 16:23:55 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:55 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:55 executing program 1: socketpair(0x2, 0x6, 0x3000, &(0x7f00000002c0)) 16:23:55 executing program 0: socketpair(0x22, 0x3, 0x138, &(0x7f00000002c0)) 16:23:55 executing program 3: socketpair(0x2, 0x6, 0x3301, &(0x7f00000002c0)) 16:23:55 executing program 1: socketpair(0x2, 0x6, 0x3001, &(0x7f00000002c0)) 16:23:55 executing program 0: socketpair(0x22, 0x3, 0x139, &(0x7f00000002c0)) 16:23:55 executing program 3: socketpair(0x2, 0x6, 0x3400, &(0x7f00000002c0)) 16:23:55 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x0, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:55 executing program 4: socketpair(0x2, 0x6, 0x142, &(0x7f00000002c0)) 16:23:55 executing program 0: socketpair(0x22, 0x3, 0x13a, &(0x7f00000002c0)) 16:23:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, 0x0, 0x0, 0x4) read$usbmon(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x10, 0xffffffffffffffff, 0x0) read$usbmon(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffffbf) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8) bind$can_raw(0xffffffffffffffff, &(0x7f0000000400)={0x1d, r3}, 0x10) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:23:56 executing program 1: socketpair(0x2, 0x6, 0x3100, &(0x7f00000002c0)) 16:23:56 executing program 3: socketpair(0x2, 0x6, 0x3401, &(0x7f00000002c0)) 16:23:56 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x0, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) 16:23:56 executing program 0: socketpair(0x22, 0x3, 0x13b, &(0x7f00000002c0)) 16:23:56 executing program 0: socketpair(0x22, 0x3, 0x13c, &(0x7f00000002c0)) 16:23:56 executing program 1: socketpair(0x2, 0x6, 0x3101, &(0x7f00000002c0)) 16:23:56 executing program 3: socketpair(0x2, 0x6, 0x3500, &(0x7f00000002c0)) 16:23:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x20400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0, r1, r0], 0x3) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x4, 0x4420) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000006b00)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x111, 0x6}}, 0x20) 16:23:56 executing program 1: socketpair(0x2, 0x6, 0x3200, &(0x7f00000002c0)) 16:23:56 executing program 3: socketpair(0x2, 0x6, 0x3501, &(0x7f00000002c0)) 16:23:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x29d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, 0x0, 0x0, 0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8) syz_io_uring_setup(0x5223, &(0x7f0000000100)={0x0, 0x4c26, 0x2, 0x3, 0x25b, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 16:23:57 executing program 1: socketpair(0x2, 0x6, 0x3201, &(0x7f00000002c0)) 16:23:57 executing program 0: socketpair(0x22, 0x3, 0x13d, &(0x7f00000002c0)) 16:23:57 executing program 3: socketpair(0x2, 0x6, 0x3600, &(0x7f00000002c0)) 16:23:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"bd70971ff45215d67e818c05b5d1237e", 0x0, 0x0, {0x7, 0xa7af}, {0xa9f, 0x4}, 0x2, [0x6579, 0x2, 0x100, 0x7, 0x6, 0x80000000003ff, 0x34, 0xa, 0x8, 0x6, 0x2, 0x9, 0x67, 0x2, 0x6]}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x93, 0x0}, 0x21) 16:23:57 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:57 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:23:57 executing program 0: socketpair(0x22, 0x3, 0x13e, &(0x7f00000002c0)) 16:23:57 executing program 1: socketpair(0x2, 0x6, 0x3300, &(0x7f00000002c0)) 16:23:57 executing program 3: socketpair(0x2, 0x6, 0x3601, &(0x7f00000002c0)) 16:23:57 executing program 1: socketpair(0x2, 0x6, 0x3301, &(0x7f00000002c0)) 16:23:57 executing program 0: socketpair(0x22, 0x3, 0x13f, &(0x7f00000002c0)) 16:23:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2) 16:23:58 executing program 2: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000240)="8ad3b258458706d5828fabf4d77cbf07794eab13ceb1675b077abe22f2cbd8edc68116535c872f9ebf40f00a993514a23366ff55016e", &(0x7f0000000280)=""/218}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) getuid() 16:23:58 executing program 4: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000240)="8ad3b258458706d5828fabf4d77cbf07794eab13ceb1675b077abe22f2cbd8edc68116535c872f9ebf40f00a993514a23366ff55016e", &(0x7f0000000280)=""/218}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) getuid() 16:23:58 executing program 3: socketpair(0x2, 0x6, 0x3700, &(0x7f00000002c0)) 16:23:58 executing program 1: socketpair(0x2, 0x6, 0x3400, &(0x7f00000002c0)) 16:23:58 executing program 0: socketpair(0x22, 0x3, 0x140, &(0x7f00000002c0)) 16:23:58 executing program 0: socketpair(0x22, 0x3, 0x141, &(0x7f00000002c0)) 16:23:58 executing program 1: socketpair(0x2, 0x6, 0x3401, &(0x7f00000002c0)) 16:23:58 executing program 3: socketpair(0x2, 0x6, 0x3701, &(0x7f00000002c0)) 16:23:58 executing program 4: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000240)="8ad3b258458706d5828fabf4d77cbf07794eab13ceb1675b077abe22f2cbd8edc68116535c872f9ebf40f00a993514a23366ff55016e", &(0x7f0000000280)=""/218}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) getuid() 16:23:58 executing program 2: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000240)="8ad3b258458706d5828fabf4d77cbf07794eab13ceb1675b077abe22f2cbd8edc68116535c872f9ebf40f00a993514a23366ff55016e", &(0x7f0000000280)=""/218}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) getuid() 16:23:58 executing program 1: socketpair(0x2, 0x6, 0x3500, &(0x7f00000002c0)) 16:23:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x29d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, 0x0, 0x0, 0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8) syz_io_uring_setup(0x5223, &(0x7f0000000100)={0x0, 0x4c26, 0x2, 0x3, 0x25b, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 16:23:59 executing program 4: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000240)="8ad3b258458706d5828fabf4d77cbf07794eab13ceb1675b077abe22f2cbd8edc68116535c872f9ebf40f00a993514a23366ff55016e", &(0x7f0000000280)=""/218}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) getuid() 16:23:59 executing program 0: socketpair(0x22, 0x3, 0x142, &(0x7f00000002c0)) 16:23:59 executing program 2: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000240)="8ad3b258458706d5828fabf4d77cbf07794eab13ceb1675b077abe22f2cbd8edc68116535c872f9ebf40f00a993514a23366ff55016e", &(0x7f0000000280)=""/218}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) getuid() 16:23:59 executing program 3: socketpair(0x2, 0x6, 0x3800, &(0x7f00000002c0)) 16:23:59 executing program 1: socketpair(0x2, 0x6, 0x3501, &(0x7f00000002c0)) 16:23:59 executing program 2: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000240)="8ad3b258458706d5828fabf4d77cbf07794eab13ceb1675b077abe22f2cbd8edc68116535c872f9ebf40f00a993514a23366ff55016e", &(0x7f0000000280)=""/218}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:23:59 executing program 3: socketpair(0x2, 0x6, 0x3801, &(0x7f00000002c0)) 16:23:59 executing program 0: socketpair(0x22, 0x3, 0x143, &(0x7f00000002c0)) 16:23:59 executing program 4: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000240)="8ad3b258458706d5828fabf4d77cbf07794eab13ceb1675b077abe22f2cbd8edc68116535c872f9ebf40f00a993514a23366ff55016e", &(0x7f0000000280)=""/218}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:23:59 executing program 1: socketpair(0x2, 0x6, 0x3600, &(0x7f00000002c0)) 16:23:59 executing program 0: socketpair(0x22, 0x3, 0x144, &(0x7f00000002c0)) 16:24:00 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:00 executing program 1: socketpair(0x2, 0x6, 0x3601, &(0x7f00000002c0)) 16:24:00 executing program 2: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:24:00 executing program 4: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000240)="8ad3b258458706d5828fabf4d77cbf07794eab13ceb1675b077abe22f2cbd8edc68116535c872f9ebf40f00a993514a23366ff55016e", &(0x7f0000000280)=""/218}, 0x20) 16:24:00 executing program 3: socketpair(0x2, 0x6, 0x3900, &(0x7f00000002c0)) 16:24:00 executing program 0: socketpair(0x22, 0x3, 0x145, &(0x7f00000002c0)) 16:24:00 executing program 2: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:24:00 executing program 4: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) 16:24:00 executing program 3: socketpair(0x2, 0x6, 0x3901, &(0x7f00000002c0)) 16:24:00 executing program 5: socketpair(0x2, 0x6, 0x13c, &(0x7f00000002c0)) 16:24:00 executing program 0: socketpair(0x22, 0x3, 0x146, &(0x7f00000002c0)) 16:24:00 executing program 1: socketpair(0x2, 0x6, 0x3700, &(0x7f00000002c0)) 16:24:00 executing program 3: socketpair(0x2, 0x6, 0x3a00, &(0x7f00000002c0)) 16:24:00 executing program 2: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:24:00 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_raw(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1}, 0x0) 16:24:00 executing program 4: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) 16:24:00 executing program 0: socketpair(0x22, 0x3, 0x147, &(0x7f00000002c0)) 16:24:00 executing program 1: socketpair(0x2, 0x6, 0x3701, &(0x7f00000002c0)) 16:24:00 executing program 4: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) 16:24:01 executing program 3: socketpair(0x2, 0x6, 0x3a01, &(0x7f00000002c0)) 16:24:01 executing program 2: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:24:01 executing program 1: socketpair(0x2, 0x6, 0x3800, &(0x7f00000002c0)) 16:24:01 executing program 0: socketpair(0x22, 0x3, 0x148, &(0x7f00000002c0)) 16:24:01 executing program 2: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:24:01 executing program 4: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) 16:24:01 executing program 1: socketpair(0x2, 0x6, 0x3801, &(0x7f00000002c0)) 16:24:01 executing program 0: socketpair(0x22, 0x3, 0x149, &(0x7f00000002c0)) 16:24:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:24:01 executing program 1: socketpair(0x2, 0x6, 0x3900, &(0x7f00000002c0)) 16:24:01 executing program 4: waitid(0x0, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) 16:24:01 executing program 3: socketpair(0x2, 0x6, 0x3b00, &(0x7f00000002c0)) 16:24:01 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_raw(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1}, 0x0) 16:24:01 executing program 1: socketpair(0x2, 0x6, 0x3901, &(0x7f00000002c0)) 16:24:01 executing program 3: socketpair(0x2, 0x6, 0x3b01, &(0x7f00000002c0)) 16:24:01 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:24:01 executing program 0: socketpair(0x22, 0x3, 0x14a, &(0x7f00000002c0)) 16:24:01 executing program 4: waitid(0x0, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) 16:24:01 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:24:02 executing program 3: socketpair(0x2, 0x6, 0x3c00, &(0x7f00000002c0)) 16:24:02 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_raw(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1}, 0x0) 16:24:02 executing program 1: socketpair(0x2, 0x6, 0x3a00, &(0x7f00000002c0)) 16:24:02 executing program 4: waitid(0x0, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) 16:24:02 executing program 0: socketpair(0x22, 0x3, 0x14b, &(0x7f00000002c0)) 16:24:02 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x141) 16:24:02 executing program 3: socketpair(0x2, 0x6, 0x3c01, &(0x7f00000002c0)) 16:24:02 executing program 4: waitid(0x3, 0x0, 0x0, 0x2, &(0x7f00000000c0)) 16:24:02 executing program 1: socketpair(0x2, 0x6, 0x3a01, &(0x7f00000002c0)) 16:24:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x141) 16:24:02 executing program 0: socketpair(0x22, 0x3, 0x14c, &(0x7f00000002c0)) 16:24:02 executing program 3: socketpair(0x2, 0x6, 0x3d00, &(0x7f00000002c0)) 16:24:02 executing program 4: waitid(0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 16:24:03 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:03 executing program 3: socketpair(0x2, 0x6, 0x3d01, &(0x7f00000002c0)) 16:24:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x141) 16:24:03 executing program 0: socketpair(0x22, 0x3, 0x14d, &(0x7f00000002c0)) 16:24:03 executing program 1: socketpair(0x2, 0x6, 0x3b00, &(0x7f00000002c0)) 16:24:03 executing program 4: waitid(0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 16:24:03 executing program 4: waitid(0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 16:24:03 executing program 3: socketpair(0x2, 0x6, 0x3e00, &(0x7f00000002c0)) 16:24:03 executing program 0: socketpair(0x22, 0x3, 0x14e, &(0x7f00000002c0)) 16:24:03 executing program 1: socketpair(0x2, 0x6, 0x3b01, &(0x7f00000002c0)) 16:24:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x141) 16:24:03 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:03 executing program 3: socketpair(0x2, 0x6, 0x3e01, &(0x7f00000002c0)) 16:24:03 executing program 4: waitid(0x3, 0x0, 0x0, 0x2, 0x0) 16:24:03 executing program 1: socketpair(0x2, 0x6, 0x3c00, &(0x7f00000002c0)) 16:24:03 executing program 0: socketpair(0x22, 0x3, 0x14f, &(0x7f00000002c0)) 16:24:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x25, 0x0, 0xffffff62}, 0x0) 16:24:04 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:04 executing program 3: socketpair(0x2, 0x6, 0x3f00, &(0x7f00000002c0)) 16:24:04 executing program 4: socketpair(0x2, 0x6, 0x3b00, &(0x7f00000002c0)) 16:24:04 executing program 1: socketpair(0x2, 0x6, 0x3c01, &(0x7f00000002c0)) 16:24:04 executing program 0: socketpair(0x22, 0x3, 0x150, &(0x7f00000002c0)) 16:24:04 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:04 executing program 3: socketpair(0x2, 0x6, 0x3f01, &(0x7f00000002c0)) 16:24:04 executing program 4: waitid(0x3, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)) 16:24:04 executing program 1: socketpair(0x2, 0x6, 0x3d00, &(0x7f00000002c0)) 16:24:04 executing program 0: socketpair(0x22, 0x3, 0x151, &(0x7f00000002c0)) 16:24:04 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:04 executing program 0: socketpair(0x22, 0x3, 0x152, &(0x7f00000002c0)) 16:24:04 executing program 3: socketpair(0x2, 0x6, 0x4000, &(0x7f00000002c0)) 16:24:04 executing program 1: socketpair(0x2, 0x6, 0x3d01, &(0x7f00000002c0)) 16:24:04 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_raw(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1}, 0x0) 16:24:04 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:04 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:04 executing program 0: socketpair(0x22, 0x3, 0x153, &(0x7f00000002c0)) 16:24:04 executing program 3: socketpair(0x2, 0x6, 0x4001, &(0x7f00000002c0)) 16:24:04 executing program 1: socketpair(0x2, 0x6, 0x3e00, &(0x7f00000002c0)) 16:24:04 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:04 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:04 executing program 3: socketpair(0x2, 0x6, 0x4100, &(0x7f00000002c0)) 16:24:04 executing program 0: socketpair(0x22, 0x3, 0x154, &(0x7f00000002c0)) 16:24:04 executing program 1: socketpair(0x2, 0x6, 0x3e01, &(0x7f00000002c0)) 16:24:04 executing program 3: socketpair(0x2, 0x6, 0x4101, &(0x7f00000002c0)) 16:24:05 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_raw(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1}, 0x0) 16:24:05 executing program 2: socketpair(0x2, 0x6, 0x4100, &(0x7f00000002c0)) 16:24:05 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:05 executing program 1: socketpair(0x2, 0x6, 0x3f00, &(0x7f00000002c0)) 16:24:05 executing program 0: socketpair(0x22, 0x3, 0x155, &(0x7f00000002c0)) 16:24:05 executing program 3: socketpair(0x2, 0x6, 0x4200, &(0x7f00000002c0)) 16:24:05 executing program 3: socketpair(0x2, 0x6, 0x4201, &(0x7f00000002c0)) 16:24:05 executing program 0: socketpair(0x22, 0x3, 0x156, &(0x7f00000002c0)) 16:24:05 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:05 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:05 executing program 3: socketpair(0x2, 0x6, 0x4300, &(0x7f00000002c0)) 16:24:05 executing program 1: socketpair(0x2, 0x6, 0x3f01, &(0x7f00000002c0)) 16:24:06 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_raw(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1}, 0x0) 16:24:06 executing program 0: socketpair(0x22, 0x3, 0x157, &(0x7f00000002c0)) 16:24:06 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:06 executing program 3: socketpair(0x2, 0x6, 0x4301, &(0x7f00000002c0)) 16:24:06 executing program 1: socketpair(0x2, 0x6, 0x4000, &(0x7f00000002c0)) 16:24:06 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:06 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:06 executing program 0: socketpair(0x22, 0x3, 0x158, &(0x7f00000002c0)) 16:24:06 executing program 3: socketpair(0x2, 0x6, 0x4400, &(0x7f00000002c0)) 16:24:06 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:06 executing program 1: socketpair(0x2, 0x6, 0x4001, &(0x7f00000002c0)) 16:24:06 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:07 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:07 executing program 3: socketpair(0x2, 0x6, 0x4401, &(0x7f00000002c0)) 16:24:07 executing program 0: socketpair(0x22, 0x3, 0x159, &(0x7f00000002c0)) 16:24:07 executing program 1: socketpair(0x2, 0x6, 0x4100, &(0x7f00000002c0)) 16:24:07 executing program 2: socketpair(0x2, 0x6, 0x12b, &(0x7f00000002c0)) 16:24:07 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x41) 16:24:07 executing program 1: socketpair(0x2, 0x6, 0x4101, &(0x7f00000002c0)) 16:24:07 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x41) 16:24:07 executing program 0: socketpair(0x22, 0x3, 0x15a, &(0x7f00000002c0)) 16:24:07 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x41) 16:24:07 executing program 3: socketpair(0x2, 0x6, 0x4500, &(0x7f00000002c0)) 16:24:07 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) 16:24:07 executing program 1: socketpair(0x2, 0x6, 0x4200, &(0x7f00000002c0)) 16:24:07 executing program 0: socketpair(0x22, 0x3, 0x15b, &(0x7f00000002c0)) 16:24:07 executing program 2: socketpair(0x2, 0x6, 0x129, &(0x7f00000002c0)) 16:24:07 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x41) 16:24:07 executing program 3: socketpair(0x2, 0x6, 0x4501, &(0x7f00000002c0)) 16:24:07 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 16:24:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x41) 16:24:07 executing program 1: socketpair(0x2, 0x6, 0x4201, &(0x7f00000002c0)) 16:24:07 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 16:24:07 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) 16:24:07 executing program 0: socketpair(0x22, 0x3, 0x15c, &(0x7f00000002c0)) 16:24:07 executing program 3: socketpair(0x2, 0x6, 0x4600, &(0x7f00000002c0)) 16:24:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x41) 16:24:07 executing program 0: socketpair(0x22, 0x3, 0x15d, &(0x7f00000002c0)) 16:24:08 executing program 3: socketpair(0x2, 0x6, 0x4601, &(0x7f00000002c0)) 16:24:08 executing program 1: socketpair(0x2, 0x6, 0x4300, &(0x7f00000002c0)) 16:24:08 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x2d1e, 0x7ff, {}, {0xffffffffffffffff}, 0x80000000, 0x8}) 16:24:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x41) 16:24:08 executing program 0: socketpair(0x22, 0x3, 0x15e, &(0x7f00000002c0)) 16:24:08 executing program 1: socketpair(0x2, 0x6, 0x4301, &(0x7f00000002c0)) 16:24:08 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 16:24:08 executing program 3: socketpair(0x2, 0x6, 0x4700, &(0x7f00000002c0)) 16:24:08 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:08 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x41) 16:24:08 executing program 0: socketpair(0x22, 0x3, 0x15f, &(0x7f00000002c0)) 16:24:08 executing program 1: socketpair(0x2, 0x6, 0x4400, &(0x7f00000002c0)) 16:24:08 executing program 3: socketpair(0x2, 0x6, 0x4701, &(0x7f00000002c0)) 16:24:08 executing program 1: socketpair(0x2, 0x6, 0x4401, &(0x7f00000002c0)) 16:24:08 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:08 executing program 0: socketpair(0x22, 0x3, 0x160, &(0x7f00000002c0)) 16:24:08 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x41) 16:24:08 executing program 4: openat$drirender128(0xffffffffffffff9c, 0x0, 0x6400, 0x0) 16:24:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 16:24:09 executing program 0: socketpair(0x22, 0x3, 0x161, &(0x7f00000002c0)) 16:24:09 executing program 1: socketpair(0x2, 0x6, 0x4500, &(0x7f00000002c0)) 16:24:09 executing program 3: socketpair(0x2, 0x6, 0x4800, &(0x7f00000002c0)) 16:24:09 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x41) 16:24:09 executing program 4: openat$drirender128(0xffffffffffffff9c, 0x0, 0x6400, 0x0) 16:24:09 executing program 3: socketpair(0x2, 0x6, 0x4801, &(0x7f00000002c0)) 16:24:09 executing program 0: socketpair(0x22, 0x3, 0x162, &(0x7f00000002c0)) 16:24:09 executing program 1: socketpair(0x2, 0x6, 0x4501, &(0x7f00000002c0)) 16:24:09 executing program 4: openat$drirender128(0xffffffffffffff9c, 0x0, 0x6400, 0x0) 16:24:09 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x41) 16:24:09 executing program 3: socketpair(0x2, 0x6, 0x4900, &(0x7f00000002c0)) 16:24:10 executing program 3: socketpair(0x2, 0x6, 0x4901, &(0x7f00000002c0)) 16:24:10 executing program 0: socketpair(0x22, 0x3, 0x163, &(0x7f00000002c0)) 16:24:10 executing program 1: socketpair(0x2, 0x6, 0x4600, &(0x7f00000002c0)) 16:24:10 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x41) 16:24:10 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 16:24:10 executing program 5: socketpair(0x2, 0x6, 0x11f, &(0x7f00000002c0)) 16:24:10 executing program 0: socketpair(0x22, 0x3, 0x164, &(0x7f00000002c0)) 16:24:10 executing program 1: socketpair(0x2, 0x6, 0x4601, &(0x7f00000002c0)) 16:24:10 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x41) 16:24:10 executing program 3: socketpair(0x2, 0x6, 0x4a00, &(0x7f00000002c0)) 16:24:10 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 16:24:10 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:10 executing program 1: socketpair(0x2, 0x6, 0x4700, &(0x7f00000002c0)) 16:24:10 executing program 3: socketpair(0x2, 0x6, 0x4a01, &(0x7f00000002c0)) 16:24:10 executing program 0: socketpair(0x22, 0x3, 0x165, &(0x7f00000002c0)) 16:24:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x41) 16:24:10 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 16:24:11 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:11 executing program 1: socketpair(0x2, 0x6, 0x4701, &(0x7f00000002c0)) 16:24:11 executing program 3: socketpair(0x2, 0x6, 0x4b00, &(0x7f00000002c0)) 16:24:11 executing program 0: socketpair(0x22, 0x3, 0x166, &(0x7f00000002c0)) 16:24:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x41) 16:24:11 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:11 executing program 1: socketpair(0x2, 0x6, 0x4800, &(0x7f00000002c0)) 16:24:11 executing program 3: socketpair(0x2, 0x6, 0x4b01, &(0x7f00000002c0)) 16:24:11 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:11 executing program 0: socketpair(0x22, 0x3, 0x167, &(0x7f00000002c0)) 16:24:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, 0x0, 0x41) 16:24:11 executing program 1: socketpair(0x2, 0x6, 0x4801, &(0x7f00000002c0)) 16:24:11 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000200000085100000faffffff183900000500000000000000000000009500000010000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000100)=""/57, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0xffff1558, 0x9}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x5, 0xfffffffe}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4480, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r3, r4, r4, r5], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) 16:24:11 executing program 3: socketpair(0x2, 0x6, 0x4c00, &(0x7f00000002c0)) 16:24:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:11 executing program 0: socketpair(0x22, 0x3, 0x168, &(0x7f00000002c0)) 16:24:11 executing program 5 (fault-call:0 fault-nth:0): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:11 executing program 1: socketpair(0x2, 0x6, 0x4900, &(0x7f00000002c0)) 16:24:11 executing program 3: socketpair(0x2, 0x6, 0x4c01, &(0x7f00000002c0)) 16:24:11 executing program 0: socketpair(0x22, 0x3, 0x169, &(0x7f00000002c0)) 16:24:11 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:11 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) [ 2263.669736][T20662] FAULT_INJECTION: forcing a failure. [ 2263.669736][T20662] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.715670][T20662] CPU: 1 PID: 20662 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2263.724169][T20662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2263.734253][T20662] Call Trace: [ 2263.737567][T20662] dump_stack+0x141/0x1d7 [ 2263.741925][T20662] should_fail.cold+0x5/0xa [ 2263.746459][T20662] ? getname_flags.part.0+0x50/0x4f0 [ 2263.752300][T20662] ? getname_flags.part.0+0x50/0x4f0 [ 2263.757887][T20662] should_failslab+0x5/0x10 [ 2263.762434][T20662] kmem_cache_alloc+0x5e/0x370 [ 2263.767245][T20662] getname_flags.part.0+0x50/0x4f0 [ 2263.772388][T20662] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2263.776870][T20670] FAULT_INJECTION: forcing a failure. [ 2263.776870][T20670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2263.778404][T20662] getname+0x8e/0xd0 [ 2263.778443][T20662] do_sys_openat2+0xf5/0x420 [ 2263.799949][T20662] ? build_open_flags+0x6f0/0x6f0 [ 2263.805005][T20662] ? __context_tracking_exit+0xb8/0xe0 [ 2263.810494][T20662] ? lock_downgrade+0x6e0/0x6e0 [ 2263.811690][T20671] FAULT_INJECTION: forcing a failure. [ 2263.811690][T20671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2263.815468][T20662] __x64_sys_openat+0x13f/0x1f0 [ 2263.815504][T20662] ? __ia32_sys_open+0x1c0/0x1c0 [ 2263.815539][T20662] ? syscall_enter_from_user_mode+0x27/0x70 [ 2263.844606][T20662] do_syscall_64+0x3a/0xb0 [ 2263.849047][T20662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2263.854967][T20662] RIP: 0033:0x4665f9 [ 2263.858875][T20662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2263.878500][T20662] RSP: 002b:00007f8128f67188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2263.886928][T20662] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2263.895000][T20662] RDX: 0000000000006400 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2263.903499][T20662] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2263.911566][T20662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2263.919574][T20662] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 [ 2263.927626][T20671] CPU: 0 PID: 20671 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 2263.936072][T20671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2263.946139][T20671] Call Trace: [ 2263.955244][T20671] dump_stack+0x141/0x1d7 [ 2263.959692][T20671] should_fail.cold+0x5/0xa [ 2263.964239][T20671] _copy_to_user+0x2c/0x150 [ 2263.968769][T20671] simple_read_from_buffer+0xcc/0x160 [ 2263.974176][T20671] proc_fail_nth_read+0x187/0x220 [ 2263.980086][T20671] ? proc_exe_link+0x1d0/0x1d0 [ 2263.984863][T20671] ? security_file_permission+0x248/0x560 [ 2263.991069][T20671] ? proc_exe_link+0x1d0/0x1d0 [ 2263.996288][T20671] vfs_read+0x1b5/0x570 [ 2264.000473][T20671] ksys_read+0x12d/0x250 [ 2264.004904][T20671] ? vfs_write+0xa30/0xa30 [ 2264.009350][T20671] ? syscall_enter_from_user_mode+0x27/0x70 [ 2264.015376][T20671] do_syscall_64+0x3a/0xb0 [ 2264.019814][T20671] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2264.025732][T20671] RIP: 0033:0x41937c [ 2264.029661][T20671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2264.049289][T20671] RSP: 002b:00007f9f2ac11170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2264.057813][T20671] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c 16:24:11 executing program 5 (fault-call:0 fault-nth:1): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) [ 2264.065805][T20671] RDX: 000000000000000f RSI: 00007f9f2ac111e0 RDI: 0000000000000003 [ 2264.074069][T20671] RBP: 00007f9f2ac111d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.082058][T20671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2264.085141][T20675] FAULT_INJECTION: forcing a failure. [ 2264.085141][T20675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.090037][T20671] R13: 0000000000a9fb1f R14: 00007f9f2ac11300 R15: 0000000000022000 [ 2264.121432][T20670] CPU: 0 PID: 20670 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2264.129887][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2264.140038][T20670] Call Trace: [ 2264.143324][T20670] dump_stack+0x141/0x1d7 [ 2264.147670][T20670] should_fail.cold+0x5/0xa [ 2264.152291][T20670] _copy_from_user+0x2c/0x180 [ 2264.157356][T20670] __copy_msghdr_from_user+0x91/0x4b0 [ 2264.162957][T20670] ? __ia32_sys_shutdown+0x70/0x70 [ 2264.168114][T20670] ? lock_chain_count+0x20/0x20 [ 2264.172989][T20670] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2264.178988][T20670] ? _parse_integer+0x132/0x180 [ 2264.183873][T20670] ___sys_recvmsg+0xd5/0x200 [ 2264.188497][T20670] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2264.194144][T20670] ? __fget_files+0x266/0x3d0 [ 2264.198941][T20670] ? lock_downgrade+0x6e0/0x6e0 [ 2264.203863][T20670] ? __fget_files+0x288/0x3d0 [ 2264.208563][T20670] ? __fget_light+0xea/0x280 [ 2264.213778][T20670] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2264.220048][T20670] __sys_recvmsg+0xe2/0x1a0 [ 2264.224566][T20670] ? __sys_recvmsg_sock+0x40/0x40 [ 2264.229617][T20670] ? syscall_enter_from_user_mode+0x27/0x70 [ 2264.235537][T20670] do_syscall_64+0x3a/0xb0 [ 2264.239968][T20670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2264.245894][T20670] RIP: 0033:0x4665f9 [ 2264.249801][T20670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.269907][T20670] RSP: 002b:00007f003d55d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2264.278344][T20670] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2264.286349][T20670] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 2264.294419][T20670] RBP: 00007f003d55d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.302401][T20670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2264.310389][T20670] R13: 0000000000a9fb1f R14: 00007f003d55d300 R15: 0000000000022000 [ 2264.318399][T20675] CPU: 1 PID: 20675 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2264.326840][T20675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2264.336907][T20675] Call Trace: [ 2264.340198][T20675] dump_stack+0x141/0x1d7 [ 2264.344544][T20675] should_fail.cold+0x5/0xa [ 2264.349067][T20675] strncpy_from_user+0x34/0x3e0 [ 2264.353950][T20675] getname_flags.part.0+0x95/0x4f0 [ 2264.359088][T20675] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2264.365088][T20675] getname+0x8e/0xd0 [ 2264.368995][T20675] do_sys_openat2+0xf5/0x420 [ 2264.373602][T20675] ? build_open_flags+0x6f0/0x6f0 [ 2264.378733][T20675] ? __context_tracking_exit+0xb8/0xe0 [ 2264.384216][T20675] ? lock_downgrade+0x6e0/0x6e0 [ 2264.389096][T20675] __x64_sys_openat+0x13f/0x1f0 [ 2264.393961][T20675] ? __ia32_sys_open+0x1c0/0x1c0 [ 2264.398917][T20675] ? syscall_enter_from_user_mode+0x27/0x70 [ 2264.404831][T20675] do_syscall_64+0x3a/0xb0 [ 2264.409264][T20675] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2264.415170][T20675] RIP: 0033:0x4665f9 16:24:12 executing program 1: socketpair(0x2, 0x6, 0x4901, &(0x7f00000002c0)) [ 2264.419069][T20675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.438683][T20675] RSP: 002b:00007f8128f67188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2264.447111][T20675] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2264.455092][T20675] RDX: 0000000000006400 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2264.463071][T20675] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.471143][T20675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2264.484759][T20675] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 16:24:12 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:12 executing program 3: socketpair(0x2, 0x6, 0x4d00, &(0x7f00000002c0)) 16:24:12 executing program 0: socketpair(0x22, 0x3, 0x16a, &(0x7f00000002c0)) 16:24:12 executing program 1: socketpair(0x2, 0x6, 0x4a00, &(0x7f00000002c0)) 16:24:12 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:12 executing program 5 (fault-call:0 fault-nth:2): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:12 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:12 executing program 3: socketpair(0x2, 0x6, 0x4d01, &(0x7f00000002c0)) 16:24:12 executing program 1: socketpair(0x2, 0x6, 0x4a01, &(0x7f00000002c0)) 16:24:12 executing program 0: socketpair(0x22, 0x3, 0x16b, &(0x7f00000002c0)) [ 2264.780559][T20688] FAULT_INJECTION: forcing a failure. [ 2264.780559][T20688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.810874][T20690] FAULT_INJECTION: forcing a failure. [ 2264.810874][T20690] name failslab, interval 1, probability 0, space 0, times 0 16:24:12 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x4, 0x0}, 0x41) [ 2264.846809][T20688] CPU: 0 PID: 20688 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2264.855303][T20688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2264.865658][T20688] Call Trace: [ 2264.868961][T20688] dump_stack+0x141/0x1d7 [ 2264.873380][T20688] should_fail.cold+0x5/0xa [ 2264.877920][T20688] _copy_to_user+0x2c/0x150 [ 2264.882474][T20688] simple_read_from_buffer+0xcc/0x160 [ 2264.887891][T20688] proc_fail_nth_read+0x187/0x220 16:24:12 executing program 1: socketpair(0x2, 0x6, 0x4b00, &(0x7f00000002c0)) [ 2264.893023][T20688] ? proc_exe_link+0x1d0/0x1d0 [ 2264.897833][T20688] ? security_file_permission+0x248/0x560 [ 2264.903601][T20688] ? proc_exe_link+0x1d0/0x1d0 [ 2264.908399][T20688] vfs_read+0x1b5/0x570 [ 2264.912599][T20688] ksys_read+0x12d/0x250 [ 2264.916897][T20688] ? vfs_write+0xa30/0xa30 [ 2264.921436][T20688] ? syscall_enter_from_user_mode+0x27/0x70 [ 2264.927658][T20688] do_syscall_64+0x3a/0xb0 [ 2264.932368][T20688] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2264.938389][T20688] RIP: 0033:0x41937c 16:24:12 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x40000, 0x0}, 0x41) [ 2264.942310][T20688] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2264.962060][T20688] RSP: 002b:00007f003d55d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2264.970765][T20688] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 2264.978942][T20688] RDX: 000000000000000f RSI: 00007f003d55d1e0 RDI: 0000000000000004 [ 2264.986958][T20688] RBP: 00007f003d55d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.994976][T20688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.003050][T20688] R13: 0000000000a9fb1f R14: 00007f003d55d300 R15: 0000000000022000 [ 2265.016354][T20690] CPU: 0 PID: 20690 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2265.024818][T20690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2265.034894][T20690] Call Trace: [ 2265.038194][T20690] dump_stack+0x141/0x1d7 [ 2265.042767][T20690] should_fail.cold+0x5/0xa 16:24:13 executing program 1: socketpair(0x2, 0x6, 0x4b01, &(0x7f00000002c0)) [ 2265.047297][T20690] ? __alloc_file+0x21/0x280 [ 2265.052010][T20690] ? __alloc_file+0x21/0x280 [ 2265.056888][T20690] should_failslab+0x5/0x10 [ 2265.061418][T20690] kmem_cache_alloc+0x5e/0x370 [ 2265.066226][T20690] ? stack_trace_save+0x8c/0xc0 [ 2265.071129][T20690] __alloc_file+0x21/0x280 [ 2265.075669][T20690] alloc_empty_file+0x6d/0x170 [ 2265.080485][T20690] path_openat+0xe3/0x27e0 [ 2265.084930][T20690] ? __lock_acquire+0x16a7/0x5230 [ 2265.090001][T20690] ? path_lookupat+0x850/0x850 [ 2265.094813][T20690] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2265.101195][T20690] do_filp_open+0x190/0x3d0 [ 2265.105740][T20690] ? may_open_dev+0xf0/0xf0 [ 2265.110273][T20690] ? alloc_fd+0x2bc/0x640 [ 2265.114673][T20690] ? lock_downgrade+0x6e0/0x6e0 [ 2265.119558][T20690] ? do_raw_spin_lock+0x120/0x2b0 [ 2265.124618][T20690] ? rwlock_bug.part.0+0x90/0x90 [ 2265.129681][T20690] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2265.135960][T20690] ? _raw_spin_unlock+0x24/0x40 [ 2265.140926][T20690] ? alloc_fd+0x2bc/0x640 [ 2265.145296][T20690] do_sys_openat2+0x16d/0x420 [ 2265.150010][T20690] ? build_open_flags+0x6f0/0x6f0 [ 2265.155058][T20690] ? __context_tracking_exit+0xb8/0xe0 [ 2265.160542][T20690] ? lock_downgrade+0x6e0/0x6e0 [ 2265.165450][T20690] __x64_sys_openat+0x13f/0x1f0 [ 2265.170413][T20690] ? __ia32_sys_open+0x1c0/0x1c0 [ 2265.175823][T20690] ? syscall_enter_from_user_mode+0x27/0x70 [ 2265.182530][T20690] do_syscall_64+0x3a/0xb0 [ 2265.186965][T20690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2265.192889][T20690] RIP: 0033:0x4665f9 16:24:13 executing program 1: socketpair(0x2, 0x6, 0x4c00, &(0x7f00000002c0)) [ 2265.196814][T20690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.216437][T20690] RSP: 002b:00007f8128f67188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2265.226203][T20690] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2265.234223][T20690] RDX: 0000000000006400 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2265.242213][T20690] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.250201][T20690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.258186][T20690] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 16:24:13 executing program 3: socketpair(0x2, 0x6, 0x4e00, &(0x7f00000002c0)) 16:24:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:13 executing program 5 (fault-call:0 fault-nth:3): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:13 executing program 1: socketpair(0x2, 0x6, 0x4c01, &(0x7f00000002c0)) 16:24:13 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x41) 16:24:13 executing program 0: socketpair(0x22, 0x3, 0x16c, &(0x7f00000002c0)) 16:24:13 executing program 3: socketpair(0x2, 0x6, 0x4e01, &(0x7f00000002c0)) 16:24:13 executing program 0: socketpair(0x22, 0x3, 0x16d, &(0x7f00000002c0)) 16:24:13 executing program 3: socketpair(0x2, 0x6, 0x4f00, &(0x7f00000002c0)) 16:24:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:13 executing program 1: socketpair(0x2, 0x6, 0x4d00, &(0x7f00000002c0)) 16:24:13 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000}, 0x41) [ 2265.566610][T20721] FAULT_INJECTION: forcing a failure. [ 2265.566610][T20721] name failslab, interval 1, probability 0, space 0, times 0 16:24:13 executing program 3: socketpair(0x2, 0x6, 0x4f01, &(0x7f00000002c0)) [ 2265.670655][T20721] CPU: 0 PID: 20721 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2265.679134][T20721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2265.689214][T20721] Call Trace: [ 2265.692511][T20721] dump_stack+0x141/0x1d7 [ 2265.696870][T20721] should_fail.cold+0x5/0xa [ 2265.701599][T20721] ? security_file_alloc+0x34/0x170 [ 2265.706831][T20721] ? security_file_alloc+0x34/0x170 [ 2265.712063][T20721] should_failslab+0x5/0x10 [ 2265.716601][T20721] kmem_cache_alloc+0x5e/0x370 [ 2265.721406][T20721] security_file_alloc+0x34/0x170 [ 2265.726473][T20721] __alloc_file+0xd8/0x280 [ 2265.730915][T20721] alloc_empty_file+0x6d/0x170 [ 2265.735720][T20721] path_openat+0xe3/0x27e0 [ 2265.740165][T20721] ? __lock_acquire+0x16a7/0x5230 [ 2265.745230][T20721] ? path_lookupat+0x850/0x850 [ 2265.750054][T20721] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2265.756170][T20721] do_filp_open+0x190/0x3d0 [ 2265.760961][T20721] ? may_open_dev+0xf0/0xf0 [ 2265.765493][T20721] ? alloc_fd+0x2bc/0x640 [ 2265.769847][T20721] ? lock_downgrade+0x6e0/0x6e0 [ 2265.774726][T20721] ? do_raw_spin_lock+0x120/0x2b0 [ 2265.779813][T20721] ? rwlock_bug.part.0+0x90/0x90 [ 2265.784795][T20721] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2265.791084][T20721] ? _raw_spin_unlock+0x24/0x40 [ 2265.796066][T20721] ? alloc_fd+0x2bc/0x640 [ 2265.800428][T20721] do_sys_openat2+0x16d/0x420 [ 2265.805140][T20721] ? build_open_flags+0x6f0/0x6f0 [ 2265.810189][T20721] ? __context_tracking_exit+0xb8/0xe0 [ 2265.815670][T20721] ? lock_downgrade+0x6e0/0x6e0 16:24:13 executing program 3: socketpair(0x2, 0x6, 0x5000, &(0x7f00000002c0)) [ 2265.820559][T20721] __x64_sys_openat+0x13f/0x1f0 [ 2265.825438][T20721] ? __ia32_sys_open+0x1c0/0x1c0 [ 2265.830419][T20721] ? syscall_enter_from_user_mode+0x27/0x70 [ 2265.836416][T20721] do_syscall_64+0x3a/0xb0 [ 2265.840851][T20721] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2265.846774][T20721] RIP: 0033:0x4665f9 [ 2265.850686][T20721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.870519][T20721] RSP: 002b:00007f8128f67188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2265.878948][T20721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2265.886929][T20721] RDX: 0000000000006400 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2265.894916][T20721] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.902991][T20721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.912018][T20721] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 16:24:14 executing program 5 (fault-call:0 fault-nth:4): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x7, 0x0, 0x700}, 0x0) 16:24:14 executing program 0: socketpair(0x22, 0x3, 0x16e, &(0x7f00000002c0)) 16:24:14 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000000000}, 0x41) 16:24:14 executing program 1: socketpair(0x2, 0x6, 0x4d01, &(0x7f00000002c0)) 16:24:14 executing program 3: socketpair(0x2, 0x6, 0x5001, &(0x7f00000002c0)) 16:24:14 executing program 0: socketpair(0x22, 0x3, 0x16f, &(0x7f00000002c0)) 16:24:14 executing program 1: socketpair(0x2, 0x6, 0x4e00, &(0x7f00000002c0)) 16:24:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x700, 0x0, 0x700}, 0x0) 16:24:14 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x41) [ 2266.151132][T20748] FAULT_INJECTION: forcing a failure. [ 2266.151132][T20748] name failslab, interval 1, probability 0, space 0, times 0 [ 2266.221914][T20748] CPU: 1 PID: 20748 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2266.230385][T20748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2266.240461][T20748] Call Trace: [ 2266.243758][T20748] dump_stack+0x141/0x1d7 [ 2266.248134][T20748] should_fail.cold+0x5/0xa [ 2266.252689][T20748] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2266.258458][T20748] should_failslab+0x5/0x10 [ 2266.262997][T20748] __kmalloc+0x72/0x300 [ 2266.267183][T20748] tomoyo_realpath_from_path+0xc3/0x620 [ 2266.274755][T20748] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2266.281042][T20748] tomoyo_check_open_permission+0x272/0x380 [ 2266.286968][T20748] ? tomoyo_path_number_perm+0x590/0x590 [ 2266.292639][T20748] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2266.298685][T20748] ? path_get+0x5d/0x80 [ 2266.302873][T20748] ? lock_downgrade+0x6e0/0x6e0 [ 2266.307854][T20748] ? do_raw_spin_lock+0x120/0x2b0 [ 2266.312915][T20748] tomoyo_file_open+0xa3/0xd0 [ 2266.317622][T20748] security_file_open+0x52/0x4f0 [ 2266.322635][T20748] do_dentry_open+0x358/0x11b0 [ 2266.327443][T20748] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2266.333727][T20748] ? may_open+0x1f6/0x420 [ 2266.338107][T20748] path_openat+0x1c0e/0x27e0 [ 2266.343092][T20748] ? path_lookupat+0x850/0x850 [ 2266.347889][T20748] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2266.353911][T20748] do_filp_open+0x190/0x3d0 [ 2266.358611][T20748] ? may_open_dev+0xf0/0xf0 [ 2266.363361][T20748] ? do_raw_spin_lock+0x120/0x2b0 16:24:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x7000000, 0x0, 0x700}, 0x0) 16:24:14 executing program 1: socketpair(0x2, 0x6, 0x4e01, &(0x7f00000002c0)) [ 2266.368426][T20748] ? rwlock_bug.part.0+0x90/0x90 [ 2266.373386][T20748] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2266.379658][T20748] ? _raw_spin_unlock+0x24/0x40 [ 2266.384534][T20748] ? alloc_fd+0x2bc/0x640 [ 2266.388988][T20748] do_sys_openat2+0x16d/0x420 [ 2266.393781][T20748] ? build_open_flags+0x6f0/0x6f0 [ 2266.399105][T20748] ? __context_tracking_exit+0xb8/0xe0 [ 2266.404587][T20748] ? lock_downgrade+0x6e0/0x6e0 [ 2266.409468][T20748] __x64_sys_openat+0x13f/0x1f0 [ 2266.414341][T20748] ? __ia32_sys_open+0x1c0/0x1c0 [ 2266.419487][T20748] ? syscall_enter_from_user_mode+0x27/0x70 [ 2266.425446][T20748] do_syscall_64+0x3a/0xb0 [ 2266.429893][T20748] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2266.435995][T20748] RIP: 0033:0x4665f9 [ 2266.440018][T20748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2266.459737][T20748] RSP: 002b:00007f8128f67188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 16:24:14 executing program 5 (fault-call:0 fault-nth:5): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:14 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x41) 16:24:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x707}, 0x0) 16:24:14 executing program 3: socketpair(0x2, 0x6, 0x5100, &(0x7f00000002c0)) 16:24:14 executing program 0: socketpair(0x22, 0x3, 0x170, &(0x7f00000002c0)) 16:24:14 executing program 1: socketpair(0x2, 0x6, 0x4f00, &(0x7f00000002c0)) [ 2266.471264][T20748] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2266.479256][T20748] RDX: 0000000000006400 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2266.487244][T20748] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2266.495235][T20748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2266.503221][T20748] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 [ 2266.515173][T20748] ERROR: Out of memory at tomoyo_realpath_from_path. 16:24:14 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x41) 16:24:14 executing program 0: socketpair(0x22, 0x3, 0x171, &(0x7f00000002c0)) 16:24:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700, 0x0, 0x7}, 0x0) 16:24:14 executing program 3: socketpair(0x2, 0x6, 0x5101, &(0x7f00000002c0)) [ 2266.674464][T20773] FAULT_INJECTION: forcing a failure. [ 2266.674464][T20773] name failslab, interval 1, probability 0, space 0, times 0 [ 2266.740781][T20773] CPU: 0 PID: 20773 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2266.749267][T20773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2266.759423][T20773] Call Trace: [ 2266.762741][T20773] dump_stack+0x141/0x1d7 [ 2266.767123][T20773] should_fail.cold+0x5/0xa [ 2266.772105][T20773] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2266.777520][T20773] should_failslab+0x5/0x10 [ 2266.782055][T20773] __kmalloc+0x72/0x300 [ 2266.786250][T20773] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2266.791499][T20773] tomoyo_encode+0x28/0x50 [ 2266.795950][T20773] tomoyo_realpath_from_path+0x186/0x620 [ 2266.801623][T20773] tomoyo_check_open_permission+0x272/0x380 [ 2266.807545][T20773] ? tomoyo_path_number_perm+0x590/0x590 [ 2266.813218][T20773] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2266.819273][T20773] ? path_get+0x5d/0x80 [ 2266.823471][T20773] ? lock_downgrade+0x6e0/0x6e0 [ 2266.828347][T20773] ? do_raw_spin_lock+0x120/0x2b0 [ 2266.833411][T20773] tomoyo_file_open+0xa3/0xd0 [ 2266.838447][T20773] security_file_open+0x52/0x4f0 [ 2266.843424][T20773] do_dentry_open+0x358/0x11b0 [ 2266.848235][T20773] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2266.854506][T20773] ? may_open+0x1f6/0x420 [ 2266.858869][T20773] path_openat+0x1c0e/0x27e0 [ 2266.863535][T20773] ? path_lookupat+0x850/0x850 [ 2266.868325][T20773] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2266.874433][T20773] do_filp_open+0x190/0x3d0 [ 2266.878956][T20773] ? may_open_dev+0xf0/0xf0 [ 2266.883491][T20773] ? do_raw_spin_lock+0x120/0x2b0 16:24:14 executing program 3: socketpair(0x2, 0x6, 0x5200, &(0x7f00000002c0)) 16:24:14 executing program 3: socketpair(0x2, 0x6, 0x5201, &(0x7f00000002c0)) [ 2266.888541][T20773] ? rwlock_bug.part.0+0x90/0x90 [ 2266.893514][T20773] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2266.899793][T20773] ? _raw_spin_unlock+0x24/0x40 [ 2266.904679][T20773] ? alloc_fd+0x2bc/0x640 [ 2266.909048][T20773] do_sys_openat2+0x16d/0x420 [ 2266.913761][T20773] ? build_open_flags+0x6f0/0x6f0 [ 2266.918809][T20773] ? __context_tracking_exit+0xb8/0xe0 [ 2266.924379][T20773] ? lock_downgrade+0x6e0/0x6e0 [ 2266.929269][T20773] __x64_sys_openat+0x13f/0x1f0 [ 2266.934154][T20773] ? __ia32_sys_open+0x1c0/0x1c0 [ 2266.939120][T20773] ? syscall_enter_from_user_mode+0x27/0x70 [ 2266.945133][T20773] do_syscall_64+0x3a/0xb0 [ 2266.949568][T20773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2266.955490][T20773] RIP: 0033:0x4665f9 [ 2266.959401][T20773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2266.979291][T20773] RSP: 002b:00007f8128f67188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2266.987753][T20773] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2266.995743][T20773] RDX: 0000000000006400 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2267.003735][T20773] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2267.011721][T20773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2267.019740][T20773] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 16:24:15 executing program 5 (fault-call:0 fault-nth:6): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:15 executing program 1: socketpair(0x2, 0x6, 0x4f01, &(0x7f00000002c0)) 16:24:15 executing program 3: socketpair(0x2, 0x6, 0x5300, &(0x7f00000002c0)) 16:24:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700, 0x0, 0x700}, 0x0) 16:24:15 executing program 0: socketpair(0x22, 0x3, 0x172, &(0x7f00000002c0)) 16:24:15 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) [ 2267.106243][T20773] ERROR: Out of memory at tomoyo_realpath_from_path. 16:24:15 executing program 3: socketpair(0x2, 0x6, 0x5301, &(0x7f00000002c0)) 16:24:15 executing program 0: socketpair(0x22, 0x3, 0x173, &(0x7f00000002c0)) 16:24:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700, 0x0, 0x7000000}, 0x0) [ 2267.258558][T20798] FAULT_INJECTION: forcing a failure. [ 2267.258558][T20798] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.310057][T20798] CPU: 1 PID: 20798 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2267.318542][T20798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2267.328612][T20798] Call Trace: [ 2267.331911][T20798] dump_stack+0x141/0x1d7 [ 2267.336276][T20798] should_fail.cold+0x5/0xa [ 2267.340847][T20798] ? drm_file_alloc+0x6e/0x8e0 [ 2267.345717][T20798] should_failslab+0x5/0x10 [ 2267.350693][T20798] kmem_cache_alloc_trace+0x55/0x290 [ 2267.356021][T20798] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 2267.361871][T20798] drm_file_alloc+0x6e/0x8e0 [ 2267.366501][T20798] drm_open+0x366/0xb10 [ 2267.370684][T20798] ? drm_minor_acquire+0x1e1/0x400 [ 2267.375833][T20798] ? drm_file_alloc+0x8e0/0x8e0 [ 2267.380902][T20798] drm_stub_open+0x281/0x530 [ 2267.385542][T20798] ? drm_minor_acquire+0x400/0x400 [ 2267.390778][T20798] chrdev_open+0x266/0x770 [ 2267.395227][T20798] ? cdev_device_add+0x210/0x210 [ 2267.400196][T20798] ? security_file_open+0x205/0x4f0 [ 2267.405444][T20798] do_dentry_open+0x4b9/0x11b0 [ 2267.410248][T20798] ? cdev_device_add+0x210/0x210 [ 2267.415221][T20798] ? may_open+0x1f6/0x420 [ 2267.419582][T20798] path_openat+0x1c0e/0x27e0 [ 2267.424210][T20798] ? path_lookupat+0x850/0x850 [ 2267.429287][T20798] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2267.435306][T20798] do_filp_open+0x190/0x3d0 [ 2267.439830][T20798] ? may_open_dev+0xf0/0xf0 [ 2267.444364][T20798] ? do_raw_spin_lock+0x120/0x2b0 [ 2267.449422][T20798] ? rwlock_bug.part.0+0x90/0x90 [ 2267.454392][T20798] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2267.460668][T20798] ? _raw_spin_unlock+0x24/0x40 [ 2267.465545][T20798] ? alloc_fd+0x2bc/0x640 [ 2267.469908][T20798] do_sys_openat2+0x16d/0x420 [ 2267.474608][T20798] ? build_open_flags+0x6f0/0x6f0 [ 2267.479654][T20798] ? __context_tracking_exit+0xb8/0xe0 [ 2267.485142][T20798] ? lock_downgrade+0x6e0/0x6e0 [ 2267.490025][T20798] __x64_sys_openat+0x13f/0x1f0 [ 2267.494902][T20798] ? __ia32_sys_open+0x1c0/0x1c0 [ 2267.499870][T20798] ? syscall_enter_from_user_mode+0x27/0x70 [ 2267.505972][T20798] do_syscall_64+0x3a/0xb0 [ 2267.510406][T20798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2267.516414][T20798] RIP: 0033:0x4665f9 [ 2267.521282][T20798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2267.540915][T20798] RSP: 002b:00007f8128f67188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2267.549442][T20798] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 16:24:15 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x41) 16:24:15 executing program 1: socketpair(0x2, 0x6, 0x5000, &(0x7f00000002c0)) 16:24:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700, 0x0, 0x700000000000000}, 0x0) 16:24:15 executing program 5 (fault-call:0 fault-nth:7): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:15 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x41) 16:24:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:15 executing program 0: socketpair(0x22, 0x3, 0x174, &(0x7f00000002c0)) 16:24:15 executing program 3: socketpair(0x2, 0x6, 0x5400, &(0x7f00000002c0)) 16:24:15 executing program 1: socketpair(0x2, 0x6, 0x5001, &(0x7f00000002c0)) [ 2267.557438][T20798] RDX: 0000000000006400 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2267.565430][T20798] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2267.573510][T20798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2267.581609][T20798] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 16:24:15 executing program 4: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000001680)=""/4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) recvmsg$can_j1939(r0, &(0x7f00000015c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/247, 0xf7}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/22, 0x16}, {&(0x7f0000001240)=""/169, 0xa9}, {&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001340)=""/227, 0xe3}, {&(0x7f0000001440)=""/44, 0x2c}], 0x8, &(0x7f0000001500)=""/142, 0x8e}, 0x40000001) r1 = syz_open_dev$mouse(&(0x7f0000001600), 0x7, 0x4200) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001640)={r0, r1, 0x11}, 0x10) 16:24:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x7}, 0x0) 16:24:15 executing program 1: socketpair(0x2, 0x6, 0x5100, &(0x7f00000002c0)) 16:24:15 executing program 0: socketpair(0x22, 0x3, 0x175, &(0x7f00000002c0)) [ 2267.774035][T20822] FAULT_INJECTION: forcing a failure. [ 2267.774035][T20822] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.813591][T20822] CPU: 1 PID: 20822 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2267.822060][T20822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2267.832165][T20822] Call Trace: [ 2267.835466][T20822] dump_stack+0x141/0x1d7 [ 2267.839836][T20822] should_fail.cold+0x5/0xa [ 2267.844383][T20822] ? drm_file_alloc+0x6e/0x8e0 [ 2267.849184][T20822] should_failslab+0x5/0x10 [ 2267.853721][T20822] kmem_cache_alloc_trace+0x55/0x290 [ 2267.859051][T20822] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 2267.864897][T20822] drm_file_alloc+0x6e/0x8e0 [ 2267.869517][T20822] drm_open+0x366/0xb10 [ 2267.873703][T20822] ? drm_minor_acquire+0x1e1/0x400 [ 2267.878847][T20822] ? drm_file_alloc+0x8e0/0x8e0 [ 2267.883729][T20822] drm_stub_open+0x281/0x530 [ 2267.888359][T20822] ? drm_minor_acquire+0x400/0x400 [ 2267.893504][T20822] chrdev_open+0x266/0x770 [ 2267.897982][T20822] ? cdev_device_add+0x210/0x210 [ 2267.902961][T20822] ? security_file_open+0x205/0x4f0 [ 2267.908196][T20822] do_dentry_open+0x4b9/0x11b0 [ 2267.913001][T20822] ? cdev_device_add+0x210/0x210 [ 2267.918656][T20822] ? may_open+0x1f6/0x420 16:24:15 executing program 1: socketpair(0x2, 0x6, 0x5101, &(0x7f00000002c0)) 16:24:15 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x22, 0x800, 0x1f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xf, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x61) [ 2267.923005][T20822] path_openat+0x1c0e/0x27e0 [ 2267.927645][T20822] ? path_lookupat+0x850/0x850 [ 2267.932430][T20822] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2267.938545][T20822] do_filp_open+0x190/0x3d0 [ 2267.943069][T20822] ? may_open_dev+0xf0/0xf0 [ 2267.947606][T20822] ? do_raw_spin_lock+0x120/0x2b0 [ 2267.952929][T20822] ? rwlock_bug.part.0+0x90/0x90 [ 2267.957903][T20822] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2267.964193][T20822] ? _raw_spin_unlock+0x24/0x40 [ 2267.969070][T20822] ? alloc_fd+0x2bc/0x640 [ 2267.973451][T20822] do_sys_openat2+0x16d/0x420 [ 2267.978179][T20822] ? build_open_flags+0x6f0/0x6f0 [ 2267.983260][T20822] ? __context_tracking_exit+0xb8/0xe0 [ 2267.988779][T20822] ? lock_downgrade+0x6e0/0x6e0 [ 2267.993663][T20822] __x64_sys_openat+0x13f/0x1f0 [ 2267.998539][T20822] ? __ia32_sys_open+0x1c0/0x1c0 [ 2268.003501][T20822] ? syscall_enter_from_user_mode+0x27/0x70 [ 2268.009429][T20822] do_syscall_64+0x3a/0xb0 [ 2268.013866][T20822] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2268.019871][T20822] RIP: 0033:0x4665f9 [ 2268.023788][T20822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2268.043506][T20822] RSP: 002b:00007f8128f67188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2268.051945][T20822] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2268.059942][T20822] RDX: 0000000000006400 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2268.067935][T20822] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2268.075923][T20822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2268.083920][T20822] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 16:24:16 executing program 5 (fault-call:0 fault-nth:8): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:16 executing program 3: socketpair(0x2, 0x6, 0x5401, &(0x7f00000002c0)) 16:24:16 executing program 0: socketpair(0x22, 0x3, 0x176, &(0x7f00000002c0)) 16:24:16 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x40000040) 16:24:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x700}, 0x0) 16:24:16 executing program 1: socketpair(0x2, 0x6, 0x5200, &(0x7f00000002c0)) 16:24:16 executing program 0: socketpair(0x22, 0x3, 0x177, &(0x7f00000002c0)) 16:24:16 executing program 3: socketpair(0x2, 0x6, 0x5500, &(0x7f00000002c0)) 16:24:16 executing program 1: socketpair(0x2, 0x6, 0x5201, &(0x7f00000002c0)) 16:24:16 executing program 4: msgsnd(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300006a785037534381cb8fb1807dae08e848f5dabd8ad344b76a9e9f56c042579b5aec172a0489"], 0x30, 0x800) socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000540)=0x1, 0x4) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)="bf60d7ece0a873cabc9adc514098ce3c57443394e4bcfe48e670462052be62056858750b1730dbacd0620dcc01ebb1fc1e80bd5ca397c5e0", 0x38, 0x41, 0x1}, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000040)=@caif=@util, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/242, 0xf2}], 0x3, &(0x7f0000000400)=""/42, 0x2a}, 0x100) [ 2268.321689][T20849] FAULT_INJECTION: forcing a failure. [ 2268.321689][T20849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2268.369118][T20849] CPU: 0 PID: 20849 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2268.377595][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2268.387758][T20849] Call Trace: [ 2268.391062][T20849] dump_stack+0x141/0x1d7 [ 2268.395423][T20849] should_fail.cold+0x5/0xa [ 2268.399967][T20849] _copy_to_user+0x2c/0x150 [ 2268.404507][T20849] simple_read_from_buffer+0xcc/0x160 [ 2268.409917][T20849] proc_fail_nth_read+0x187/0x220 [ 2268.414975][T20849] ? proc_exe_link+0x1d0/0x1d0 [ 2268.419758][T20849] ? security_file_permission+0x248/0x560 [ 2268.425517][T20849] ? proc_exe_link+0x1d0/0x1d0 [ 2268.430302][T20849] vfs_read+0x1b5/0x570 [ 2268.434524][T20849] ksys_read+0x12d/0x250 [ 2268.438803][T20849] ? vfs_write+0xa30/0xa30 [ 2268.443263][T20849] ? syscall_enter_from_user_mode+0x27/0x70 [ 2268.449205][T20849] do_syscall_64+0x3a/0xb0 [ 2268.453659][T20849] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2268.459587][T20849] RIP: 0033:0x41937c [ 2268.463497][T20849] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2268.483135][T20849] RSP: 002b:00007f8128f67170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2268.491624][T20849] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 2268.499629][T20849] RDX: 000000000000000f RSI: 00007f8128f671e0 RDI: 0000000000000003 [ 2268.507627][T20849] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 16:24:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x7000000}, 0x0) 16:24:16 executing program 1: socketpair(0x2, 0x6, 0x5300, &(0x7f00000002c0)) 16:24:16 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:16 executing program 0: socketpair(0x22, 0x3, 0x178, &(0x7f00000002c0)) 16:24:16 executing program 3: socketpair(0x2, 0x6, 0x5501, &(0x7f00000002c0)) [ 2268.515585][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2268.523544][T20849] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 16:24:16 executing program 1: socketpair(0x2, 0x6, 0x5301, &(0x7f00000002c0)) 16:24:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x7) 16:24:16 executing program 3: socketpair(0x2, 0x6, 0x5600, &(0x7f00000002c0)) 16:24:16 executing program 0: socketpair(0x22, 0x3, 0x179, &(0x7f00000002c0)) 16:24:16 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2e00, 0x0) 16:24:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x700) 16:24:17 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@raw=[@generic={0x4, 0x7, 0xe, 0x6, 0x15d9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x40, 0x7, 0xd, 0x8, 0x2dfdc17e}], &(0x7f0000000080)='GPL\x00', 0x6f2fef94, 0xf, &(0x7f00000000c0)=""/15, 0x41100, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xc, 0x3675, 0x21}, 0x10, 0xffffffffffffffff}, 0x78) 16:24:17 executing program 1: socketpair(0x2, 0x6, 0x5400, &(0x7f00000002c0)) 16:24:17 executing program 3: socketpair(0x2, 0x6, 0x5601, &(0x7f00000002c0)) 16:24:17 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2f00, 0x0) 16:24:17 executing program 0: socketpair(0x22, 0x3, 0x17a, &(0x7f00000002c0)) 16:24:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x7000000) 16:24:17 executing program 0: socketpair(0x22, 0x3, 0x17b, &(0x7f00000002c0)) 16:24:17 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x5c00, 0x0) 16:24:17 executing program 1: socketpair(0x2, 0x6, 0x5401, &(0x7f00000002c0)) 16:24:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x700000000000000) 16:24:17 executing program 3: socketpair(0x2, 0x6, 0x5700, &(0x7f00000002c0)) 16:24:17 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x460301, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:17 executing program 0: socketpair(0x22, 0x3, 0x17c, &(0x7f00000002c0)) 16:24:17 executing program 1: socketpair(0x2, 0x6, 0x5500, &(0x7f00000002c0)) 16:24:17 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6402, 0x0) 16:24:17 executing program 3: socketpair(0x2, 0x6, 0x5701, &(0x7f00000002c0)) 16:24:17 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1d, 0x62, 0x22e4, 0x9, 0x621, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x7, 0x5, 0x1f, 0x9, 0x0, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x40) 16:24:17 executing program 1: socketpair(0x2, 0x6, 0x5501, &(0x7f00000002c0)) 16:24:17 executing program 0: socketpair(0x22, 0x3, 0x17d, &(0x7f00000002c0)) 16:24:17 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6403, 0x0) 16:24:17 executing program 3: socketpair(0x2, 0x6, 0x5800, &(0x7f00000002c0)) 16:24:17 executing program 1: socketpair(0x2, 0x6, 0x5600, &(0x7f00000002c0)) 16:24:17 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcd0}, 0x41) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000640)={0x41000, 0x1, 0x48, 0x2000, 0x9, {}, {0x2, 0x1, 0x4, 0x3f, 0x20, 0x6, "49a933dd"}, 0x6, 0x4, @userptr=0x4, 0x377, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000006c0)=[r2, r1, r1, r0], 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000600)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000140)=""/67, 0x43}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000200)=""/229, 0xe5}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/100, 0x64}], 0x8, &(0x7f0000000540)=""/176, 0xb0}, 0x40000060) 16:24:17 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6404, 0x0) 16:24:17 executing program 0: socketpair(0x22, 0x3, 0x17e, &(0x7f00000002c0)) 16:24:18 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0), 0x3, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f00000005c0)={&(0x7f0000000340)=[0x0, r1, r1], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x81, 0x3, 0x1, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000600)=[r1], &(0x7f00000002c0)=[r2, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r6, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x155080, 0x0) recvmsg$can_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f0000000140)=""/40, 0x28}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f00000000c0), 0x4) bind$can_raw(r8, &(0x7f00000001c0), 0x10) r9 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x678600) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000400)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000004c0)={&(0x7f0000000480)=[r1, r1], 0x101, 0x2, 0x1, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r9, 0xc02864ca, &(0x7f0000000540)={&(0x7f0000000440)=[r1, r10, r1, r1], &(0x7f0000000500)=[0x0, r4, r5, r11, r3, r3], 0x0, 0x4, 0x2}) 16:24:18 executing program 3: socketpair(0x2, 0x6, 0x5801, &(0x7f00000002c0)) 16:24:18 executing program 0: socketpair(0x22, 0x3, 0x17f, &(0x7f00000002c0)) 16:24:18 executing program 1: socketpair(0x2, 0x6, 0x5601, &(0x7f00000002c0)) 16:24:18 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6405, 0x0) 16:24:18 executing program 3: socketpair(0x2, 0x6, 0x5900, &(0x7f00000002c0)) 16:24:18 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x41) 16:24:18 executing program 2: getitimer(0x2, &(0x7f0000000000)) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x11, 0xffffffffffffffff, 0x10000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000040)=@isdn={0x22, 0x18, 0x1, 0x6, 0x27}, 0x0, 0x0, 0x1}, 0x400) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r3, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:18 executing program 0: socketpair(0x22, 0x3, 0x180, &(0x7f00000002c0)) 16:24:18 executing program 1: socketpair(0x2, 0x6, 0x5700, &(0x7f00000002c0)) 16:24:18 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6406, 0x0) 16:24:18 executing program 3: socketpair(0x2, 0x6, 0x5901, &(0x7f00000002c0)) 16:24:18 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = fanotify_init(0x20, 0x400) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000b, 0x30, r2, 0x8000000) r4 = socket$inet(0x2, 0x2, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) fanotify_mark(r1, 0xd0, 0x100a, r2, &(0x7f00000003c0)='./file0\x00') recvmsg$can_j1939(r2, &(0x7f0000000380)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000340)}, 0x10100) r5 = syz_io_uring_complete(r3) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000000c0)=r5, 0x1) r6 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = syz_io_uring_complete(r3) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000100)=r7, 0x1) 16:24:18 executing program 1: socketpair(0x2, 0x6, 0x5701, &(0x7f00000002c0)) 16:24:18 executing program 0: socketpair(0x22, 0x3, 0x181, &(0x7f00000002c0)) 16:24:18 executing program 3: socketpair(0x2, 0x6, 0x5a00, &(0x7f00000002c0)) 16:24:18 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6407, 0x0) 16:24:18 executing program 1: socketpair(0x2, 0x6, 0x5800, &(0x7f00000002c0)) 16:24:18 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6408, 0x0) 16:24:19 executing program 2: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x9}) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/34, 0x22}], 0x1, &(0x7f0000000980)=""/4096, 0x1000}, 0x40010102) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000400)={&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000003c0)=""/62, 0x3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000)="cf8c671ba9cdc4bb018ab2684ae8724e7f5b4d7b4b8b466b5770051625a3c81e6fcac3d01095742f6a7b67bce70df6ef876f549d6d2bfdc94bec7d26266c8d9f849831a6d2f395ac0923ed1a86e8284f8773bce38fe5b902270230e4713c741d20046f26cf4fae9766d038cf8c4356fad947989eb09160da563c9e21725da718220c02cfae5fb25327ed3545b3add77943efc339eb4d92eb", &(0x7f00000000c0)=""/217}, 0x20) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x601, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000580)={&(0x7f0000000480), &(0x7f00000004c0)=""/189, 0xbd}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r3, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:19 executing program 0: socketpair(0x22, 0x3, 0x182, &(0x7f00000002c0)) 16:24:19 executing program 4: r0 = io_uring_setup(0xd09, &(0x7f0000000040)={0x0, 0x36c9, 0x1, 0x1, 0x22c}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x401, 0x2601c0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r1, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:19 executing program 3: socketpair(0x2, 0x6, 0x5a01, &(0x7f00000002c0)) 16:24:19 executing program 1: socketpair(0x2, 0x6, 0x5801, &(0x7f00000002c0)) 16:24:19 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6418, 0x0) 16:24:19 executing program 0: socketpair(0x22, 0x3, 0x183, &(0x7f00000002c0)) 16:24:19 executing program 1: socketpair(0x2, 0x6, 0x5900, &(0x7f00000002c0)) 16:24:19 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xff00, 0x0) 16:24:19 executing program 3: socketpair(0x2, 0x6, 0x5b00, &(0x7f00000002c0)) 16:24:19 executing program 2: msgctl$IPC_RMID(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x2, 0xee01, 0xffffffffffffffff, r0, r1, 0x160, 0x347}, 0x0, 0x0, 0x10001, 0xff, 0x0, 0x0, 0x40, 0x800, 0xb65, 0x1, r2}) clock_gettime(0x0, &(0x7f0000000180)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r4, &(0x7f0000000100)={0x0, 0x4e, 0x0, 0x0, 0x0, 0xfffffffffffffe6c}, 0x10000) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x8000000) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x400000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x8000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r8, 0x29, 0x4, 0x1f, 0xa757, 0xf2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x7807, 0x8, 0x6, 0x9}}) fanotify_mark(r5, 0x76, 0x8000021, r6, &(0x7f0000000140)='./file0\x00') accept(r3, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80) 16:24:19 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket(0x29, 0x2, 0x7) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:19 executing program 0: socketpair(0x22, 0x3, 0x184, &(0x7f00000002c0)) 16:24:19 executing program 1: socketpair(0x2, 0x6, 0x5901, &(0x7f00000002c0)) 16:24:19 executing program 3: socketpair(0x2, 0x6, 0x5b01, &(0x7f00000002c0)) 16:24:19 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x2) 16:24:19 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) 16:24:19 executing program 0: socketpair(0x22, 0x3, 0x185, &(0x7f00000002c0)) 16:24:19 executing program 1: socketpair(0x2, 0x6, 0x5a00, &(0x7f00000002c0)) 16:24:19 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x3) 16:24:19 executing program 3: socketpair(0x2, 0x6, 0x5c00, &(0x7f00000002c0)) 16:24:19 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = socket(0x18, 0xa, 0x9) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=0x28) 16:24:20 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=0x38) 16:24:20 executing program 3: socketpair(0x2, 0x6, 0x5c01, &(0x7f00000002c0)) 16:24:20 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x4) 16:24:20 executing program 0: socketpair(0x22, 0x3, 0x186, &(0x7f00000002c0)) 16:24:20 executing program 1: socketpair(0x2, 0x6, 0x5a01, &(0x7f00000002c0)) 16:24:20 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4007, @fd_index=0x3, 0x5, 0x71014923, 0x7, 0x4, 0x0, {0x3, r3}}, 0x6) 16:24:20 executing program 3: socketpair(0x2, 0x6, 0x5d00, &(0x7f00000002c0)) 16:24:20 executing program 0: socketpair(0x22, 0x3, 0x187, &(0x7f00000002c0)) 16:24:20 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "62ff24dfe1911442"}, 0x10}, 0x1, 0x0, 0x0, 0x4048000}, 0x40004) 16:24:20 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x5) 16:24:20 executing program 1: socketpair(0x2, 0x6, 0x5b00, &(0x7f00000002c0)) 16:24:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000800)=0xe8) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r2, &(0x7f00000007c0)={&(0x7f0000000400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/130, 0x82}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000540)=""/9, 0x9}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/137, 0x89}], 0x5, &(0x7f0000000780)=""/5, 0x5}, 0x68d2f282fdb7759e) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) accept(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r1, 0x4, 0x1, 0x7, 0x3, 0x0, @mcast2, @loopback, 0x80, 0x40, 0xa07, 0x4}}) sendmsg$can_raw(r3, &(0x7f0000000300)={&(0x7f00000003c0)={0x1d, r5}, 0x10, &(0x7f00000002c0)={&(0x7f0000000340)=@can={{0x4, 0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "57175a82d1111105"}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4044044) r6 = msgget(0x2, 0x648) msgctl$IPC_RMID(r6, 0x0) msgctl$MSG_STAT_ANY(r6, 0xd, &(0x7f0000000100)=""/128) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', r1, 0x2f, 0x3, 0x9, 0x0, 0x7c, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast1, 0x80, 0x710, 0x8, 0x8001}}) 16:24:20 executing program 0: socketpair(0x22, 0x3, 0x188, &(0x7f00000002c0)) 16:24:20 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x6) 16:24:20 executing program 3: socketpair(0x2, 0x6, 0x5d01, &(0x7f00000002c0)) 16:24:20 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 16:24:20 executing program 1: socketpair(0x2, 0x6, 0x5b01, &(0x7f00000002c0)) 16:24:20 executing program 3: socketpair(0x2, 0x6, 0x5e00, &(0x7f00000002c0)) 16:24:20 executing program 0: socketpair(0x22, 0x3, 0x189, &(0x7f00000002c0)) 16:24:20 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x7) 16:24:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) accept(r0, 0x0, &(0x7f0000000000)) 16:24:20 executing program 0: socketpair(0x22, 0x3, 0x18a, &(0x7f00000002c0)) 16:24:20 executing program 3: socketpair(0x2, 0x6, 0x5e01, &(0x7f00000002c0)) 16:24:20 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x4, 0x5, {0x0, 0xea60}, {0x3, 0x0, 0x1f, 0x6, 0x7c, 0x1f, "416918f8"}, 0x4, 0x4, @userptr=0x1f, 0x3f, 0x0, r2}) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:20 executing program 1: socketpair(0x2, 0x6, 0x5c00, &(0x7f00000002c0)) 16:24:20 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x8) 16:24:21 executing program 0: socketpair(0x22, 0x3, 0x18b, &(0x7f00000002c0)) 16:24:21 executing program 3: socketpair(0x2, 0x6, 0x5f00, &(0x7f00000002c0)) 16:24:21 executing program 1: socketpair(0x2, 0x6, 0x5c01, &(0x7f00000002c0)) 16:24:21 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) bind$can_raw(r0, &(0x7f0000000040), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:21 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x18) 16:24:21 executing program 3: socketpair(0x2, 0x6, 0x5f01, &(0x7f00000002c0)) 16:24:21 executing program 0: socketpair(0x22, 0x3, 0x18c, &(0x7f00000002c0)) 16:24:21 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffee4}, 0x41) syz_io_uring_setup(0x38b, &(0x7f0000000040)={0x0, 0x1c31, 0x8, 0x0, 0x134}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = syz_io_uring_setup(0x5, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x110}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_setup(0x4a95, &(0x7f0000000340)={0x0, 0x6ae6, 0x2, 0x2, 0x279, 0x0, r4}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x5, 0x0, {0x0, r0}, 0x4, 0x11, 0x1, {0x0, r3, r5}}, 0x4) r6 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r7 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_setup(0x1, &(0x7f0000000480)={0x0, 0x86e3, 0x0, 0x0, 0x2bb}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000003, 0x4010, r8, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) 16:24:21 executing program 1: socketpair(0x2, 0x6, 0x5d00, &(0x7f00000002c0)) 16:24:21 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x300) 16:24:21 executing program 1: socketpair(0x2, 0x6, 0x5d01, &(0x7f00000002c0)) 16:24:21 executing program 0: socketpair(0x22, 0x3, 0x18d, &(0x7f00000002c0)) 16:24:21 executing program 3: socketpair(0x2, 0x6, 0x6000, &(0x7f00000002c0)) 16:24:21 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10343) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x640100, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair(0x1f, 0x80000, 0xba, &(0x7f0000000140)={0xffffffffffffffff}) socket$phonet_pipe(0x23, 0x5, 0x2) connect$bt_rfcomm(r2, &(0x7f0000000180)={0x1f, @any, 0x7}, 0xa) socket$bt_rfcomm(0x1f, 0x3, 0x3) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xa64, 0xfffffffe, {"c11259bedde3cc0dd23869d9ff1444ce"}, 0x29c9, 0x401, 0xfffffffffffffbff}}}, 0x90) 16:24:21 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x500) 16:24:21 executing program 1: socketpair(0x2, 0x6, 0x5e00, &(0x7f00000002c0)) 16:24:21 executing program 3: socketpair(0x2, 0x6, 0x6001, &(0x7f00000002c0)) 16:24:21 executing program 1: socketpair(0x2, 0x6, 0x5e01, &(0x7f00000002c0)) 16:24:21 executing program 0: socketpair(0x22, 0x3, 0x18e, &(0x7f00000002c0)) 16:24:21 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)="d8d65be73b45507418598222163d7effe5a4e75a88c57d10f46aa60c1fb3dcea64a24b2d9c8048dd9b9379639ebc408d16df958243c6909c4b99f8a736197a24e5b7476383035e5849b2a3b71d179f653e9948791d97f7207b005228e35371479868c4ffe6622091645af6aa", 0x6c) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0xb28, 0x3, 0x4, 0x0, 0x10001, {0x77359400}, {0x4, 0x2, 0x7f, 0x1f, 0x1, 0x0, "a72cd966"}, 0x8, 0x0, @planes=&(0x7f00000000c0)={0x0, 0x6, @userptr=0x18d9, 0x3}, 0x5, 0x0, r1}) 16:24:21 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x600) 16:24:21 executing program 1: socketpair(0x2, 0x6, 0x5f00, &(0x7f00000002c0)) 16:24:21 executing program 3: socketpair(0x2, 0x6, 0x6100, &(0x7f00000002c0)) 16:24:21 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x700) 16:24:21 executing program 0: socketpair(0x22, 0x3, 0x18f, &(0x7f00000002c0)) 16:24:21 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x103) 16:24:22 executing program 3: socketpair(0x2, 0x6, 0x6101, &(0x7f00000002c0)) 16:24:22 executing program 1: socketpair(0x2, 0x6, 0x5f01, &(0x7f00000002c0)) 16:24:22 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x1800) 16:24:22 executing program 0: socketpair(0x22, 0x3, 0x190, &(0x7f00000002c0)) 16:24:22 executing program 3: socketpair(0x2, 0x6, 0x6200, &(0x7f00000002c0)) 16:24:22 executing program 1: socketpair(0x2, 0x6, 0x6000, &(0x7f00000002c0)) 16:24:22 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x3f00) 16:24:22 executing program 0: socketpair(0x22, 0x3, 0x191, &(0x7f00000002c0)) 16:24:22 executing program 3: socketpair(0x2, 0x6, 0x6201, &(0x7f00000002c0)) 16:24:22 executing program 1: socketpair(0x2, 0x6, 0x6001, &(0x7f00000002c0)) 16:24:22 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0xff00) 16:24:22 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x1000000) 16:24:22 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), 0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000100)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) 16:24:22 executing program 3: socketpair(0x2, 0x6, 0x6300, &(0x7f00000002c0)) 16:24:22 executing program 0: socketpair(0x22, 0x3, 0x192, &(0x7f00000002c0)) 16:24:22 executing program 1: socketpair(0x2, 0x6, 0x6100, &(0x7f00000002c0)) 16:24:23 executing program 1: socketpair(0x2, 0x6, 0x6101, &(0x7f00000002c0)) 16:24:23 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x2a, 0x0}, 0x0) 16:24:23 executing program 3: socketpair(0x2, 0x6, 0x6301, &(0x7f00000002c0)) 16:24:23 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x2000000) 16:24:23 executing program 0: socketpair(0x22, 0x3, 0x193, &(0x7f00000002c0)) 16:24:23 executing program 1: socketpair(0x2, 0x6, 0x6200, &(0x7f00000002c0)) 16:24:23 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x3000000) 16:24:23 executing program 0: socketpair(0x22, 0x3, 0x194, &(0x7f00000002c0)) 16:24:23 executing program 3: socketpair(0x2, 0x6, 0x6400, &(0x7f00000002c0)) 16:24:23 executing program 1: socketpair(0x2, 0x6, 0x6201, &(0x7f00000002c0)) 16:24:23 executing program 0: socketpair(0x22, 0x3, 0x195, &(0x7f00000002c0)) 16:24:23 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x4000000) 16:24:23 executing program 3: socketpair(0x2, 0x6, 0x6401, &(0x7f00000002c0)) 16:24:24 executing program 1: socketpair(0x2, 0x6, 0x6300, &(0x7f00000002c0)) 16:24:24 executing program 0: socketpair(0x22, 0x3, 0x196, &(0x7f00000002c0)) 16:24:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x5000000) 16:24:24 executing program 3: socketpair(0x2, 0x6, 0x6500, &(0x7f00000002c0)) 16:24:24 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x3}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x2, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x38) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x1000, 0x5bd7, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9f69, 0x5}) 16:24:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000058580)={{0x0, 0x0, 0x101, 0x401, 0x7fff, 0xfffffffffffffff9, 0x400, 0x7, 0x80000001, 0x3, 0x20, 0x400, 0xba, 0x7, 0x2}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000058640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000058840)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058a40)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "df189d9145ca25"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059a40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000059e40)={{0x0, 0x101, 0x7fffffff, 0x6, 0x2, 0x3ff, 0x95, 0x26, 0xb147, 0xffff, 0x6, 0xb7, 0x5, 0xcb, 0x3}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005ae40)={{0x0, 0x100000000, 0x6f, 0x2, 0x6, 0xfffffffffffffff9, 0x2332, 0x5, 0x4, 0x80000001, 0x8000, 0x3, 0xe75f, 0xfff, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005be40)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "496099dd6861fb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005ce40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "1b8d50e2c7b7bc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005de40)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "5b4c6f0401b7af"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005ee40)={{0x0, 0x1, 0x7, 0x5, 0x400, 0x6a93, 0x0, 0x0, 0x9, 0xfffffffb, 0x10001, 0xffffffff, 0x4, 0xffffffffffffff58, 0xfffffffffffffc00}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005fe40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000060040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000060240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000060440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000060640)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "a1a88276f83bf3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000061640)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {0x0, r2}, {r3, r4}, {}, {r5, r6}, {r7}, {}, {}, {r8, r9}, {}, {0x0, r10}, {0x0, r11}, {r12}, {0x0, r13}, {}, {}, {}, {}, {r14, r15}, {0x0, r16}, {0x0, r17}], 0x5, "a88d2b2eae129d"}) 16:24:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x6000000) 16:24:24 executing program 3: socketpair(0x2, 0x6, 0x6501, &(0x7f00000002c0)) 16:24:24 executing program 1: socketpair(0x2, 0x6, 0x6301, &(0x7f00000002c0)) 16:24:24 executing program 0: socketpair(0x22, 0x3, 0x197, &(0x7f00000002c0)) 16:24:24 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000006b00)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0x1, @private0, 0x5}, r2}}, 0x38) 16:24:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000000)="527f8fca4cccef553a814c1efc39cec4d8d77bfc880323576dac7104205dbaac567f67e3102392ceb2a2a9b43ca24a975d3c973bc28409a68ec88629d6e9bc9c850bdfeaf5ad3f139517add42a90bd0a124dfa187816100930533b6869c3a3a315fb6154b1db68b07ac106230faf5f010e6bb4e4bc78bee5fcef7f7eac8307f1a4a193ca3a876491eee52cdc0fd1c02d4907de6def35fb64b39e96e45624a622e4e2681d6aab4af942b7ce0f321290fd6a443c8c3e20b041c893bee04c7276796b9eb6a6fdb1a5d69e57da212adfd4f3d4675a2e90186c7cc0889a09592b1f760f0dc0", &(0x7f0000000980)=""/4096}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:24 executing program 3: socketpair(0x2, 0x6, 0x6600, &(0x7f00000002c0)) 16:24:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x7000000) 16:24:24 executing program 1: socketpair(0x2, 0x6, 0x6400, &(0x7f00000002c0)) 16:24:24 executing program 0: socketpair(0x22, 0x3, 0x198, &(0x7f00000002c0)) 16:24:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x469, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, r1, 0x0, 0x0, 0x7}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r1, r1, r1], &(0x7f0000000140)=[r2], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) recvmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:24 executing program 3: socketpair(0x2, 0x6, 0x6601, &(0x7f00000002c0)) 16:24:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0x1, &(0x7f0000000280)="a63c441737bf77fc44ff7fde046248a5c53751e64d7bd06f91c75b6a6f183fbbce41fc8e4c7c53c76a23645474e40dc4f6f669ddd5821856a846860abe0ce7238255972cff2d0352b14f640536d5130f2ab0133cdbd6370d223ccdf3fe2ef2fc8a5cba87494ae058d06097c8a71297acb4", &(0x7f0000000300)=""/160}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x7fffffff, 0x42e02) r3 = syz_io_uring_setup(0x1ce3, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x20c181, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4004, @fd=r0, 0xdc, 0x7f, 0x800, 0x15}, 0x9) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[r0, r1, r2]}, 0x3) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, 0x152d5c314edb62bc, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000400)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd_index=0x5, 0x5, 0x9, 0x4, 0x1}, 0x9) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x8000000) 16:24:24 executing program 0: socketpair(0x22, 0x3, 0x199, &(0x7f00000002c0)) 16:24:24 executing program 1: socketpair(0x2, 0x6, 0x6401, &(0x7f00000002c0)) 16:24:24 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) bind$can_raw(r1, &(0x7f0000000040), 0x10) 16:24:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x18000000) 16:24:24 executing program 3: socketpair(0x2, 0x6, 0x6700, &(0x7f00000002c0)) 16:24:24 executing program 0: socketpair(0x22, 0x3, 0x19a, &(0x7f00000002c0)) 16:24:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) write$sysctl(r1, &(0x7f0000000080)='5\x00', 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000100)={r3}) 16:24:24 executing program 1: socketpair(0x2, 0x6, 0x6500, &(0x7f00000002c0)) 16:24:24 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40012022) 16:24:24 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x3f000000) 16:24:24 executing program 0: socketpair(0x22, 0x3, 0x19b, &(0x7f00000002c0)) 16:24:24 executing program 3: socketpair(0x2, 0x6, 0x6701, &(0x7f00000002c0)) 16:24:25 executing program 1: socketpair(0x2, 0x6, 0x6501, &(0x7f00000002c0)) 16:24:25 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0xf6ffffff) 16:24:25 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000006d00)={{0x0, 0xc, 0x0, 0x5, 0x0, 0x1, 0x101, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140)=r3, 0x1) 16:24:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x616401) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:25 executing program 1: socketpair(0x2, 0x6, 0x6600, &(0x7f00000002c0)) 16:24:25 executing program 0: socketpair(0x22, 0x3, 0x19c, &(0x7f00000002c0)) 16:24:25 executing program 3: socketpair(0x2, 0x6, 0x6800, &(0x7f00000002c0)) 16:24:25 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0xfeffffff) 16:24:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2) 16:24:25 executing program 1: socketpair(0x2, 0x6, 0x6601, &(0x7f00000002c0)) 16:24:25 executing program 4: sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x3}, 0x0, 0x0, 0x0, 0x0, "200439b3068023bf"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:25 executing program 0: socketpair(0x22, 0x3, 0x19d, &(0x7f00000002c0)) 16:24:25 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0xff000000) 16:24:25 executing program 3: socketpair(0x2, 0x6, 0x6801, &(0x7f00000002c0)) 16:24:25 executing program 1: socketpair(0x2, 0x6, 0x6700, &(0x7f00000002c0)) 16:24:25 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x41) 16:24:25 executing program 0: socketpair(0x22, 0x3, 0x19e, &(0x7f00000002c0)) 16:24:25 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0xfffffff6) 16:24:25 executing program 3: socketpair(0x2, 0x6, 0x6900, &(0x7f00000002c0)) 16:24:25 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r1, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x20010, r1, 0x81) 16:24:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) socket(0x2a, 0x3, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x114, 0x0, 0x0, 0x4) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r9, 0x8000, 0x0, 0x38c, 0x5, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="0cb4b4f046138af4dbe25a49f85e84b82f6a55447e1e241ab7ab61624039bc3f64e3ade987adbed77f3888a79f0f028e4f944619fe75e69f3ce1ffc509ce4c028406182b2ea08b22ed202814191a2b146124f29c2881e6b7f2d76c67d7614d08f0ceab1227a53df2af07825232b7fd1a251000b8c7ee2456c00aa73134bb3cf36c2dc14911f887", 0x87, 0x0, 0x0, {0x0, r6}}, 0x1ff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:24:26 executing program 0: socketpair(0x22, 0x3, 0x19f, &(0x7f00000002c0)) 16:24:26 executing program 1: socketpair(0x2, 0x6, 0x6701, &(0x7f00000002c0)) 16:24:26 executing program 3: socketpair(0x2, 0x6, 0x6901, &(0x7f00000002c0)) 16:24:26 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0xfffffffe) 16:24:26 executing program 1: socketpair(0x2, 0x6, 0x6800, &(0x7f00000002c0)) 16:24:26 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x1000000000000) 16:24:26 executing program 0: socketpair(0x22, 0x3, 0x1a0, &(0x7f00000002c0)) 16:24:26 executing program 3: socketpair(0x2, 0x6, 0x6a00, &(0x7f00000002c0)) 16:24:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, &(0x7f00000001c0)=""/96, 0x60}, 0x10001) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000001a00)={0x14, r3, 0x200}, 0x14}}, 0x24004811) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000880)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x4c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) recvmsg$can_j1939(r1, &(0x7f0000000740)={&(0x7f00000003c0)=@ax25={{0x3, @null}, [@netrom, @rose, @remote, @rose, @null, @null, @remote, @null]}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000580)=""/211, 0xd3}], 0x4, &(0x7f00000006c0)=""/88, 0x58}, 0x10000) 16:24:26 executing program 1: socketpair(0x2, 0x6, 0x6801, &(0x7f00000002c0)) 16:24:26 executing program 4: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x29d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, 0x0, 0x0, 0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x6, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x440}}, 0x8001) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:26 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) connect$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x40}, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x3, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket(0x1, 0x5, 0xb37b) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0), 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000001600)=0x1, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000040), 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000200)={0x0, 0x9}) r5 = syz_open_dev$mouse(&(0x7f0000001200), 0x4, 0x408000) recvmsg$can_raw(r5, &(0x7f0000001580)={&(0x7f0000001240)=@alg, 0x80, &(0x7f00000014c0)=[{&(0x7f00000012c0)=""/111, 0x6f}, {&(0x7f0000001340)=""/85, 0x55}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x3, &(0x7f0000001500)=""/86, 0x56}, 0x100) 16:24:26 executing program 0: socketpair(0x22, 0x3, 0x1a1, &(0x7f00000002c0)) 16:24:26 executing program 3: socketpair(0x2, 0x6, 0x6a01, &(0x7f00000002c0)) 16:24:26 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x100000000000000) 16:24:26 executing program 1: socketpair(0x2, 0x6, 0x6900, &(0x7f00000002c0)) 16:24:26 executing program 3: socketpair(0x2, 0x6, 0x6b00, &(0x7f00000002c0)) 16:24:26 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x200000000000000) 16:24:26 executing program 0: socketpair(0x22, 0x3, 0x1a2, &(0x7f00000002c0)) 16:24:26 executing program 4: r0 = syz_io_uring_complete(0x0) recvmsg$can_raw(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)=""/218, 0xda}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x2, &(0x7f00000023c0)=""/39, 0x27}, 0x40000000) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000040), 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_raw(r2, &(0x7f0000000800)={&(0x7f00000004c0)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/171, 0x28}, {&(0x7f0000000680)=""/32, 0x20}], 0x3, &(0x7f0000000700)=""/220, 0xdc}, 0x40000322) syz_io_uring_setup(0x7829, &(0x7f0000000300)={0x0, 0x7dcf, 0x28, 0x0, 0x52}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x220102, 0x0) fanotify_mark(r4, 0x62, 0x0, 0xffffffffffffffff, &(0x7f0000000880)='./file0\x00') r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000440)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x1}, 0x7f) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)=0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000100)) 16:24:26 executing program 1: socketpair(0x2, 0x6, 0x6901, &(0x7f00000002c0)) 16:24:26 executing program 3: socketpair(0x2, 0x6, 0x6b01, &(0x7f00000002c0)) 16:24:26 executing program 1: socketpair(0x2, 0x6, 0x6a00, &(0x7f00000002c0)) 16:24:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2b, 0x5, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000cc0)={'ip6tnl0\x00', r2, 0x2f, 0x1, 0xbb, 0x6, 0x4, @private1, @private2, 0x7, 0x10, 0x100, 0xef4}}) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 16:24:27 executing program 0: socketpair(0x22, 0x3, 0x1a3, &(0x7f00000002c0)) 16:24:27 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x300000000000000) 16:24:27 executing program 3: socketpair(0x2, 0x6, 0x6c00, &(0x7f00000002c0)) 16:24:27 executing program 1: socketpair(0x2, 0x6, 0x6a01, &(0x7f00000002c0)) 16:24:27 executing program 0: socketpair(0x22, 0x3, 0x1a4, &(0x7f00000002c0)) 16:24:27 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x400000000000000) 16:24:27 executing program 1: socketpair(0x2, 0x6, 0x6b00, &(0x7f00000002c0)) 16:24:27 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/157, 0x9d}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/193, 0xc1}], 0x3) r2 = syz_io_uring_setup(0x757a, &(0x7f00000002c0)={0x0, 0xd15c, 0x1, 0x3, 0x20d, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@var={0xa, 0x0, 0x0, 0xe, 0x5, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x6}}]}, {0x0, [0x0, 0x5f, 0x0, 0x2e, 0x0, 0x5f, 0x0, 0x61]}}, &(0x7f0000000440)=""/193, 0x4a, 0xc1, 0x1}, 0x20) r4 = syz_open_dev$swradio(&(0x7f0000000580), 0x0, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000005c0)=[r1, r3, r4, r0, r5, r1, r6], 0x7) 16:24:27 executing program 3: socketpair(0x2, 0x6, 0x6c01, &(0x7f00000002c0)) 16:24:27 executing program 0: socketpair(0x22, 0x3, 0x1a5, &(0x7f00000002c0)) 16:24:27 executing program 1: socketpair(0x2, 0x6, 0x6b01, &(0x7f00000002c0)) 16:24:28 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = io_uring_setup(0x4649, &(0x7f00000000c0)={0x0, 0x15c8, 0x4, 0x0, 0x52}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/116, 0x74}], 0x5) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:28 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x500000000000000) 16:24:28 executing program 0: socketpair(0x22, 0x3, 0x1a6, &(0x7f00000002c0)) 16:24:28 executing program 3: socketpair(0x2, 0x6, 0x6d00, &(0x7f00000002c0)) 16:24:28 executing program 1: socketpair(0x2, 0x6, 0x6c00, &(0x7f00000002c0)) 16:24:28 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x8, 0x301800) r1 = socket(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f00000001c0)="454e6ad9d48456901b89ca45556546463f1206d139ca2b3fec4ddda5f8fb6b785646abe6a14868e7b798c1813b49c2cea316cc731a63065b62123ebd91654acbf421c79675987bd9c379fdf3d3c7331cfd05dee969a07013d5427be47c337e08d2c0aad3880d84f930e6e92829fcaaa02a3ccbfdf77ca156bffe6a5caac5e19a386d53e8b9c0bc76db59e395f1599b41c547e3c5fbb53caa199cd893e26b33", &(0x7f0000000040)=""/24}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000000), 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = io_uring_setup(0x2211, &(0x7f0000000140)={0x0, 0x4032, 0x1, 0x0, 0x376, 0x0, r3}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x48000, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x80000000, 0xa0102) r9 = socket(0x8, 0x3, 0x58) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[r6, r3, r2, r1, r7, r8, r9], 0x7) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) r10 = accept(r2, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r10, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40001121) 16:24:28 executing program 3: socketpair(0x2, 0x6, 0x6d01, &(0x7f00000002c0)) 16:24:28 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x600000000000000) 16:24:28 executing program 0: socketpair(0x22, 0x3, 0x1a7, &(0x7f00000002c0)) 16:24:28 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xc25, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[r2, r0]}, 0x2) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getgid() 16:24:28 executing program 1: socketpair(0x2, 0x6, 0x6c01, &(0x7f00000002c0)) 16:24:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = syz_io_uring_complete(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x0, 0x0, 0x6, 0xc4, 0x1}, @generic={0x80, 0x9, 0xc, 0x8, 0x6}, @call={0x85, 0x0, 0x0, 0x93}, @generic={0x20, 0x1, 0x6, 0x8, 0xffffffff}, @ldst={0x2, 0x2, 0x2, 0x1, 0x2, 0xffffffffffffff63, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xb5, &(0x7f00000002c0)=""/181, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0x0, 0x1ff}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0xa, &(0x7f0000000000)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r1}, @ldst={0x3, 0x1, 0x1, 0x2, 0x7, 0xfffffffffffffffe, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x8, 0x3, 0x7, 0xfffffffffffffff8, 0xfffffffffffffff0}, @generic={0x0, 0xd, 0x5, 0x1, 0x9}, @jmp={0x5, 0x1, 0xb, 0x7, 0x5, 0x100, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x1, 0x2, 0x0, 0xfffffffffffffff4, 0x10}, @jmp={0x5, 0x1, 0x0, 0x3, 0x1, 0x10, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5a}], &(0x7f0000000080)='syzkaller\x00', 0x200, 0x83, &(0x7f00000000c0)=""/131, 0x41000, 0x1, '\x00', 0x0, 0xa, r2, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x8, 0x1f, 0xc7}, 0x10, 0xffffffffffffffff, r3}, 0x78) 16:24:28 executing program 3: socketpair(0x2, 0x6, 0x6e00, &(0x7f00000002c0)) 16:24:28 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x700000000000000) 16:24:28 executing program 0: socketpair(0x22, 0x3, 0x1a8, &(0x7f00000002c0)) 16:24:28 executing program 1: socketpair(0x2, 0x6, 0x6d00, &(0x7f00000002c0)) 16:24:29 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x3, 0x4) 16:24:29 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x800000000000000) 16:24:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x40}, 0x1}, 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/204, 0xcc}, {&(0x7f0000000140)=""/169, 0xa9}], 0x2}, 0x2163) 16:24:29 executing program 0: socketpair(0x22, 0x3, 0x1a9, &(0x7f00000002c0)) 16:24:29 executing program 3: socketpair(0x2, 0x6, 0x6e01, &(0x7f00000002c0)) 16:24:29 executing program 1: socketpair(0x2, 0x6, 0x6d01, &(0x7f00000002c0)) 16:24:29 executing program 0: socketpair(0x22, 0x3, 0x1aa, &(0x7f00000002c0)) 16:24:29 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x1800000000000000) 16:24:29 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:29 executing program 1: socketpair(0x2, 0x6, 0x6e00, &(0x7f00000002c0)) 16:24:29 executing program 3: socketpair(0x2, 0x6, 0x6f00, &(0x7f00000002c0)) 16:24:29 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x3f00000000000000) 16:24:29 executing program 0: socketpair(0x22, 0x3, 0x1ab, &(0x7f00000002c0)) 16:24:29 executing program 3: socketpair(0x2, 0x6, 0x6f01, &(0x7f00000002c0)) 16:24:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = syz_io_uring_setup(0x47, &(0x7f0000000000), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000000000)=[r0]}, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400041, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 16:24:29 executing program 1: socketpair(0x2, 0x6, 0x6e01, &(0x7f00000002c0)) 16:24:29 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0xf6ffffff00000000) 16:24:29 executing program 0: socketpair(0x22, 0x3, 0x1ac, &(0x7f00000002c0)) 16:24:29 executing program 3: socketpair(0x2, 0x6, 0x7000, &(0x7f00000002c0)) 16:24:29 executing program 1: socketpair(0x2, 0x6, 0x6f00, &(0x7f00000002c0)) 16:24:29 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0xfeffffff00000000) 16:24:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2714}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x851) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x4}, 0x10) r3 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_enter(r3, 0x561f, 0xc78b, 0x0, &(0x7f0000000280), 0x8) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}}, 0x44) 16:24:29 executing program 0: socketpair(0x22, 0x3, 0x1ad, &(0x7f00000002c0)) 16:24:29 executing program 1: socketpair(0x2, 0x6, 0x6f01, &(0x7f00000002c0)) 16:24:29 executing program 3: socketpair(0x2, 0x6, 0x7001, &(0x7f00000002c0)) 16:24:30 executing program 0: socketpair(0x22, 0x3, 0x1ae, &(0x7f00000002c0)) 16:24:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 16:24:30 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0xff00000000000000) 16:24:30 executing program 0: socketpair(0x22, 0x3, 0x1af, &(0x7f00000002c0)) 16:24:30 executing program 3: socketpair(0x2, 0x6, 0x7100, &(0x7f00000002c0)) 16:24:30 executing program 1: socketpair(0x2, 0x6, 0x7000, &(0x7f00000002c0)) 16:24:30 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x2a140) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000000) 16:24:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, 0x0, 0x8, 0x5, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2000c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f00000001c0)={r3}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000280)=r2, 0x4) r4 = io_uring_setup(0x6166, &(0x7f00000002c0)={0x0, 0x6c72, 0x20, 0x400000, 0xc2}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r2, &(0x7f0000000340)="ca1c9c4cf4ec49e4afc8babfe98341dba7a35955cc40815216130e586d33679bf9dab5eec3e2199578af056691a55d9e769663cf9e3420c3666cee52fcd11a16f573d2c53c65a8c0615f00d56797854848a89eb02eb6873552f0b5df6d93d4758663d7bff062257c282d4cef14f9e76095245b0bea8b24f0c67a336c5b90a9f66210841d7457504e36bf7f43b6f491b72d6adb23698bfc02255d47173decc87d4a70e9c3fff60b09f5307930d2b13b66c63bb1850cb552c910adb0c9885bca2abcf0d11e0f54086941", &(0x7f0000000440)=""/82, 0x4}, 0x20) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01064c2, &(0x7f0000000200)={r3, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r5, 0xc01064c2, &(0x7f0000000240)={r3, 0x0, r6}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) eventfd2(0x2, 0x0) 16:24:30 executing program 3: socketpair(0x2, 0x6, 0x7101, &(0x7f00000002c0)) 16:24:30 executing program 0: socketpair(0x22, 0x3, 0x1b0, &(0x7f00000002c0)) 16:24:30 executing program 1: socketpair(0x2, 0x6, 0x7001, &(0x7f00000002c0)) 16:24:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x18e}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x20000040) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xa400, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x123901) 16:24:30 executing program 0: socketpair(0x22, 0x3, 0x1b1, &(0x7f00000002c0)) 16:24:30 executing program 3: socketpair(0x2, 0x6, 0x7200, &(0x7f00000002c0)) 16:24:30 executing program 1: socketpair(0x2, 0x6, 0x7100, &(0x7f00000002c0)) 16:24:30 executing program 0: socketpair(0x22, 0x3, 0x1b2, &(0x7f00000002c0)) 16:24:30 executing program 1: socketpair(0x2, 0x6, 0x7101, &(0x7f00000002c0)) 16:24:30 executing program 3: socketpair(0x2, 0x6, 0x7201, &(0x7f00000002c0)) [ 2283.001048][ T3245] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.007559][ T3245] ieee802154 phy1 wpan1: encryption failed: -22 16:24:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{r1, 0x1000, 0x55, 0x8, 0x10000, 0x6, 0x7, 0x1, 0x8000, 0x8, 0x2c0, 0x8, 0x7, 0x2, 0x7}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:31 executing program 1: socketpair(0x2, 0x6, 0x7200, &(0x7f00000002c0)) 16:24:31 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x727e82, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000300)={r2, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01064c2, &(0x7f0000000380)={r2, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000003c0)={r2, 0x1}) r9 = syz_open_dev$dri(&(0x7f0000000480), 0x800, 0x101401) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r9, 0xc00864c0, &(0x7f00000004c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000440)={&(0x7f0000000400)=[r2, r2, r5, r6, r7, r2, r2, r8], 0x7, 0x8, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, r2, 0x0, r2, 0x0, 0x0], &(0x7f0000000180)=[0x0, r4], 0x7fff, 0x8, 0x2}) syz_io_uring_setup(0x62ea, &(0x7f0000000200)={0x0, 0x4df0, 0x1, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 16:24:31 executing program 0: socketpair(0x22, 0x3, 0x1b3, &(0x7f00000002c0)) 16:24:31 executing program 3: socketpair(0x2, 0x6, 0x7300, &(0x7f00000002c0)) 16:24:31 executing program 0: socketpair(0x22, 0x3, 0x1b4, &(0x7f00000002c0)) 16:24:31 executing program 3: socketpair(0x2, 0x6, 0x7301, &(0x7f00000002c0)) 16:24:31 executing program 1: socketpair(0x2, 0x6, 0x7201, &(0x7f00000002c0)) 16:24:31 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, r1, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, r0}) 16:24:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:31 executing program 3: socketpair(0x2, 0x6, 0x7400, &(0x7f00000002c0)) 16:24:31 executing program 0: socketpair(0x22, 0x3, 0x1b5, &(0x7f00000002c0)) 16:24:31 executing program 1: socketpair(0x2, 0x6, 0x7300, &(0x7f00000002c0)) 16:24:31 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = syz_io_uring_setup(0x2124, &(0x7f0000000080)={0x0, 0x992d, 0x2, 0x1, 0x287}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x100000000, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x10000, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000400)={&(0x7f0000000240), &(0x7f00000003c0)=[0x0, r3, r4], 0x3fe, 0x0, 0x1}) syz_io_uring_setup(0x6e5f, &(0x7f0000000140)={0x0, 0x3d27, 0x4, 0x3, 0x1bb, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 16:24:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x8000000) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x50240, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000140)={{0x0, 0x6, 0x6, 0x2, 0xfffffffffffffff8, 0x1, 0x7f, 0x9, 0x400, 0x0, 0xffff, 0x8001, 0x4, 0x0, 0x80000000}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000980)={r4, 0x8}) 16:24:31 executing program 3: socketpair(0x2, 0x6, 0x7401, &(0x7f00000002c0)) 16:24:31 executing program 0: socketpair(0x22, 0x3, 0x1b6, &(0x7f00000002c0)) 16:24:31 executing program 1: socketpair(0x2, 0x6, 0x7301, &(0x7f00000002c0)) 16:24:31 executing program 3: socketpair(0x2, 0x6, 0x7500, &(0x7f00000002c0)) 16:24:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_complete(0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000)="025d24866e9d9d3e8c3d9aa63f9618", &(0x7f0000000040)=@udp6=r0, 0x4}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:31 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x6400, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x48c002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000001500)={0x4, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r1, 0xa753e750e4a1d6bb, 0x0, @ib={0x1b, 0x8, 0x9, {"97eef1d33fcb2a46bcf2db8907144ced"}, 0x742, 0x4, 0x38e0}}}, 0xa0) 16:24:31 executing program 1: socketpair(0x2, 0x6, 0x7400, &(0x7f00000002c0)) 16:24:31 executing program 0: socketpair(0x22, 0x3, 0x1b7, &(0x7f00000002c0)) 16:24:32 executing program 3: socketpair(0x2, 0x6, 0x7501, &(0x7f00000002c0)) 16:24:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x1) 16:24:32 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbde, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xecc4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x88}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4800) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x1, 0x2, 0x7}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) 16:24:32 executing program 1: socketpair(0x2, 0x6, 0x7401, &(0x7f00000002c0)) 16:24:32 executing program 0: socketpair(0x22, 0x3, 0x1b8, &(0x7f00000002c0)) 16:24:32 executing program 3: socketpair(0x2, 0x6, 0x7600, &(0x7f00000002c0)) 16:24:32 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x519, 0x7, 0x9, 0x100000001, 0x1159a000, 0x7d, 0x101, 0x7, 0x4, 0x2, 0xece5, 0x9, 0x5, 0x7}, 0x8, [0x0]}) 16:24:32 executing program 1: socketpair(0x2, 0x6, 0x7500, &(0x7f00000002c0)) 16:24:32 executing program 3: socketpair(0x2, 0x6, 0x7601, &(0x7f00000002c0)) 16:24:32 executing program 0: socketpair(0x22, 0x3, 0x1b9, &(0x7f00000002c0)) 16:24:32 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000001c0)={0x0, 0x20}) 16:24:32 executing program 1: socketpair(0x2, 0x6, 0x7501, &(0x7f00000002c0)) 16:24:32 executing program 3: socketpair(0x2, 0x6, 0x7700, &(0x7f00000002c0)) 16:24:33 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x4}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}], 0x40) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/190, 0xbe}], 0x4}, 0x0) 16:24:33 executing program 0: socketpair(0x22, 0x3, 0x1ba, &(0x7f00000002c0)) 16:24:33 executing program 5: socket$inet6_sctp(0xa, 0x0, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:33 executing program 3: socketpair(0x2, 0x6, 0x7701, &(0x7f00000002c0)) 16:24:33 executing program 1: socketpair(0x2, 0x6, 0x7600, &(0x7f00000002c0)) 16:24:33 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051040)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051240)={{0x0, 0x6, 0x7, 0x8, 0x1ae0837, 0x7f, 0x4, 0x3, 0x1e4, 0x0, 0x7, 0x100000000, 0x4, 0x80, 0x100}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051500)={0xffffffffffffffe0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "8b30cbba7925cd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000052700)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "ae7c8010832398"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053700)={{0x0, 0x3, 0x0, 0x4, 0x6, 0x8, 0x400, 0x3, 0x8, 0x5, 0x6, 0x2, 0x1, 0x9, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000537c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8c, "14e1bd97a22e35"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000547c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000549c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000054bc0)={{0x0, 0x80000000, 0x1, 0x4ed, 0xfffffffffffff40b, 0x8354, 0x81, 0x400, 0x5, 0x5, 0x9, 0x100, 0x7fff, 0x9, 0x45}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055dc0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "2da35cd9f77554"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056dc0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r2, r3}, {}, {}, {}, {r4, r5}, {}, {}, {}, {0x0, r6}, {}, {r7, r8}, {}, {}, {}, {}, {r9, r10}, {r11}, {0x0, r12}, {0x0, r13}], 0x7f, "0c054852e998da"}) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r14, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000040)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "f2e0d459c3a455"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r14, 0xc0709411, &(0x7f0000001040)={{r15, 0x100, 0x4aa, 0x8000, 0x2, 0x3fd4, 0x7, 0x9, 0x7, 0x9, 0xba85, 0x2, 0x5, 0x20}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 16:24:33 executing program 0: socketpair(0x22, 0x3, 0x1bb, &(0x7f00000002c0)) 16:24:33 executing program 3: socketpair(0x2, 0x6, 0x7800, &(0x7f00000002c0)) 16:24:33 executing program 1: socketpair(0x2, 0x6, 0x7601, &(0x7f00000002c0)) 16:24:33 executing program 4: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000040)="dcc6a95d899f518cdcefa392fd2f6717555e0ae12860b2015dca09aa2c5bb34dd107a59b40db6650f457a0a62027104e0788824f4d57ed709dc9e19c1cf7a76a12dd37100a85a56aa89d420b48f32d744b8c6ef4ef551aa0f23fc4891c1f98766f30682d58d6ba7560a12ee0592ac1cde01c460d41399543ec8c0c38a476b1bc9e46a4a23c329d1fede54fd52100bc96f741e94c44a06369695321c2c1774bfce5d23382d581acb3a1c39cb36fec78711199b4333ddcfa280eedde8e85914d89bc1134042b5daf85631370679beb79d12abbcfbe2c6b34f74c735f763cf0e2314ab799e79608b262846b903507f483465e013fd5145b767b7ec4da0d90", &(0x7f0000000140)=""/186, &(0x7f0000000200)="04f587c92192d00df31b2f7f1e4a8902f565ed6406391e7d262dd4c01412a5b27f203a9608fa7312be3a04b7701c5562828d09c0a9224573720301949ee44c9a81ed1c2f", &(0x7f0000000280)="d5f3a7a34047c9dd90f47c3108988fea67e651ee6cf7d896a329fff99d59012e2d6bff6a939ae057eee4782150d677b50d6b511aa8d420c53b05c0191a69765950f6c0c453095be3780b662e6eb51c7213", 0x0, 0x1}, 0x38) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={0xffffffffffffffff, r0}, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4000) 16:24:33 executing program 0: socketpair(0x22, 0x3, 0x1bc, &(0x7f00000002c0)) 16:24:33 executing program 1: socketpair(0x2, 0x6, 0x7700, &(0x7f00000002c0)) 16:24:34 executing program 3: socketpair(0x2, 0x6, 0x7801, &(0x7f00000002c0)) 16:24:34 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x600880, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x2010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x11c, &(0x7f0000000080)=0x20, 0x0, 0x4) 16:24:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x4}}}, 0x90) 16:24:34 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:34 executing program 0: socketpair(0x22, 0x3, 0x1bd, &(0x7f00000002c0)) 16:24:34 executing program 1: socketpair(0x2, 0x6, 0x7701, &(0x7f00000002c0)) 16:24:34 executing program 0: socketpair(0x22, 0x3, 0x1be, &(0x7f00000002c0)) 16:24:34 executing program 1: socketpair(0x2, 0x6, 0x7800, &(0x7f00000002c0)) 16:24:34 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x149200) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1}) 16:24:34 executing program 3: socketpair(0x2, 0x6, 0x7900, &(0x7f00000002c0)) 16:24:34 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000500)={&(0x7f0000000080)=@can, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)=""/61, 0x3d}], 0x5, &(0x7f0000000440)=""/141, 0x8d}, 0x100) 16:24:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 16:24:34 executing program 0: socketpair(0x22, 0x3, 0x1bf, &(0x7f00000002c0)) 16:24:34 executing program 1: socketpair(0x2, 0x6, 0x7801, &(0x7f00000002c0)) 16:24:34 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@remote, @in=@dev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:34 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x10081, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x8bb0a7aa1932beba, 0x0) 16:24:34 executing program 3: socketpair(0x2, 0x6, 0x7901, &(0x7f00000002c0)) 16:24:34 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000980)=""/4096, &(0x7f0000000040)=0x1000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg$can_raw(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @any, 0x5}, 0xa) 16:24:34 executing program 1: socketpair(0x2, 0x6, 0x7900, &(0x7f00000002c0)) 16:24:34 executing program 0: socketpair(0x22, 0x3, 0x1c0, &(0x7f00000002c0)) 16:24:34 executing program 5: r0 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="390880000100000018240000", @ANYRES32=r0, @ANYBLOB="9141a80000000008000000850000001e00000006c3060001"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x5, 0xf, 0x80000000, 0x3}, 0x10}, 0x78) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:34 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x501982, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000300)={{r1, 0xcee, 0x5, 0x6, 0x200, 0x0, 0x401, 0xe3e2, 0x9, 0x7, 0x5, 0x100000001, 0x6, 0x100000001, 0x4}}) socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001300)=r0, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000001340)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) 16:24:34 executing program 1: socketpair(0x2, 0x6, 0x7901, &(0x7f00000002c0)) 16:24:34 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/37, 0x25}], 0x3}, 0x2000) r0 = socket$can_raw(0x1d, 0x3, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0xfe5a, 0xfa00, {&(0x7f0000000040)}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:34 executing program 0: socketpair(0x22, 0x3, 0x1c1, &(0x7f00000002c0)) 16:24:34 executing program 3: socketpair(0x2, 0x6, 0x7a00, &(0x7f00000002c0)) 16:24:34 executing program 1: socketpair(0x2, 0x6, 0x7a00, &(0x7f00000002c0)) 16:24:34 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)={0xcd01, 0x40, 0xa}, 0x18) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x1, 0x0, 0x0, 0x1}, {0x3}}], 0x8) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"785fcbb95805f972905c49457b2ae043", 0x0, 0x0, {0x7, 0x1}, {0x6, 0xffff}, 0x1, [0x100, 0x3f, 0x1002, 0x7, 0x1f9, 0x81, 0x8, 0x9, 0x2, 0x0, 0x400, 0x7, 0x2, 0x400, 0xeb, 0xffffffff]}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:34 executing program 0: socketpair(0x22, 0x3, 0x1c2, &(0x7f00000002c0)) 16:24:34 executing program 3: socketpair(0x2, 0x6, 0x7a01, &(0x7f00000002c0)) 16:24:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@exit]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xb8, &(0x7f0000000100)=""/184, 0x41100, 0x6, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x10, 0x1, 0x8}, 0x10}, 0x78) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0x64, 0x6}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x6, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6}, [@map={0x18, 0x5, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x1, 0x0, 0x5, 0x2, 0x1}]}, &(0x7f0000000540)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000580)=""/38, 0x1f00, 0x1, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x2, 0xffffffff, 0x4}, 0x10}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x3, &(0x7f00000002c0)=@raw=[@exit, @generic={0x2, 0x9, 0x7, 0x9, 0x6}, @ldst={0x3, 0x2, 0x0, 0x2, 0xa, 0x1, 0x10}], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', r1, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x3, 0x10000}, 0x10, 0xdbab, r2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x8, &(0x7f0000000740)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @generic={0x9, 0x3, 0x3, 0x0, 0xb1c}, @jmp={0x5, 0x0, 0x9, 0xb, 0x2, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000780)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x4, 0x0, 0x401}, 0x10, 0x0, r2}, 0x78) 16:24:34 executing program 1: socketpair(0x2, 0x6, 0x7a01, &(0x7f00000002c0)) 16:24:34 executing program 5: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}, @ldst={0x1, 0x1, 0x0, 0x9, 0x5, 0x1, 0x4}, @exit, @jmp={0x5, 0x1, 0x9, 0x7, 0x0, 0x30, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x68}]}, &(0x7f0000000000)='GPL\x00', 0x1000, 0x53, &(0x7f0000000100)=""/83, 0x41100, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x8, 0x509f, 0x1}, 0x10, 0x21ff6}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x4, 0x8, 0x0, 0x15dd}, &(0x7f0000000340)=0xf9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x7}}, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:35 executing program 0: socketpair(0x22, 0x3, 0x1c3, &(0x7f00000002c0)) 16:24:35 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0), 0x10) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r3, 0x9}, 0x10) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r4}, 0x10) 16:24:35 executing program 3: socketpair(0x2, 0x6, 0x7b00, &(0x7f00000002c0)) 16:24:35 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x624c2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2040) 16:24:35 executing program 1: socketpair(0x2, 0x6, 0x7b00, &(0x7f00000002c0)) 16:24:35 executing program 0: socketpair(0x22, 0x3, 0x1c4, &(0x7f00000002c0)) 16:24:35 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x46400, 0x0) 16:24:35 executing program 3: socketpair(0x2, 0x6, 0x7b01, &(0x7f00000002c0)) 16:24:35 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000011c0), 0x40002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) r2 = accept(r0, &(0x7f0000000040)=@caif=@rfm, &(0x7f0000000100)=0x80) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0xfffffde9}, 0x40011141) setsockopt$inet6_dccp_buf(r2, 0x21, 0x80, &(0x7f0000000180)="fcc143cbce4f0c3a3ceccdf6f0d696f5b18ec0f72505f59d3ec9984178b8cf94571dc6fbdd8bdc4bdcb6a83c307e99818dd44ada4d8e019a1f49a36670b41ce35df2bf241e7d39e8121962d01b6e8379341754462ca454a88e6ba42ce061727acc72a3b030f3389b271b88c182dac323d0cee3bb5fc294f45ec7e504b10d8d6b961a54d576e48abc41a24019b050a0c08d39ef061f23574561716989dede88c22145651999b30c6a3f619b8bb0952f3d939df132f9f6cfc456237dd06d24ddf2bf5eafc570793c4b856f6f9cb5530d871c043d87b2c3799e3a4adf38c0bd6a3bf8559a7794760b5fd837e0", 0xeb) 16:24:35 executing program 0: socketpair(0x22, 0x3, 0x1c5, &(0x7f00000002c0)) 16:24:35 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) 16:24:35 executing program 1: socketpair(0x2, 0x6, 0x7b01, &(0x7f00000002c0)) 16:24:35 executing program 3: socketpair(0x2, 0x6, 0x7c00, &(0x7f00000002c0)) 16:24:35 executing program 0: socketpair(0x22, 0x3, 0x1c6, &(0x7f00000002c0)) 16:24:35 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000140)={{0x0, 0x100000000, 0x8, 0x4, 0xffffffff, 0x3, 0x8, 0x101, 0x80000001, 0x6dd, 0x39a0, 0x5, 0x7fffffff, 0x8, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001140)={{r1, 0x824, 0x5, 0x5158, 0x2, 0x7, 0x80000000, 0x0, 0x9, 0x7fffffff, 0x100, 0x6, 0xffffffff, 0xb5, 0x6}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='5\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000ffdbdf250700000008000b00d2eb000008002b000100ffff080032008200000005002a0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x10004001}, 0x4000040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000002240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000002280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000002300)={&(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7d3f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000002340)={r2, r3, r4, 0x0, 0x2}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x5, 0x16, 0x5, "7cabae15edfb42ec01a2a9c18cf8fb4417a2076ce0cc73a471ce340694a49cb4598ed4ff948a53c7723cff7b475e8a3d6e36439ed4c9ab0ad1737a4b67e4cc58", "441ec6fa65daf47447f975043d92ed314b48610fc0bffd414b410d36e1e2aecdffe990433a367ce1787c246f5a5c993924bdef84360019ce54140eb4d3376248", "acf43065e43fca86bfbb3589b238449167ec4062946c60ed84bd7591e847a0c0", [0x1, 0x7506]}) 16:24:35 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x3a58c2) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = accept(r0, &(0x7f0000001240)=@phonet, &(0x7f00000012c0)=0x80) recvmsg$can_raw(r2, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001300)=""/227, 0xe3}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f00000014c0)=""/91, 0x5b}, {&(0x7f00000000c0)=""/235, 0xeb}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/49, 0x31}, {&(0x7f0000002680)=""/180, 0xb4}], 0x7, &(0x7f00000027c0)=""/143, 0x8f}, 0x40) accept(r0, &(0x7f0000000280)=@l2={0x1f, 0x0, @none}, &(0x7f0000000300)=0x80) 16:24:35 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdea}, 0x100) 16:24:35 executing program 1: socketpair(0x2, 0x6, 0x7c00, &(0x7f00000002c0)) 16:24:35 executing program 0: socketpair(0x22, 0x3, 0x1c7, &(0x7f00000002c0)) 16:24:35 executing program 3: socketpair(0x2, 0x6, 0x7c01, &(0x7f00000002c0)) 16:24:35 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x286c00, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) 16:24:35 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/153, 0x99}, {&(0x7f0000000240)=""/152, 0xce}, {&(0x7f00000008c0)=""/107, 0x6b}, {&(0x7f0000000940)=""/31, 0x1f}, {&(0x7f0000000080)=""/225, 0xd9}, {&(0x7f0000000a80)=""/114, 0x80}, {&(0x7f0000000b00)=""/124, 0x7c}], 0x8, &(0x7f0000000180)=""/143, 0x8e}, 0x2) 16:24:35 executing program 1: socketpair(0x2, 0x6, 0x7c01, &(0x7f00000002c0)) 16:24:35 executing program 3: socketpair(0x2, 0x6, 0x7d00, &(0x7f00000002c0)) 16:24:35 executing program 0: socketpair(0x22, 0x3, 0x1c8, &(0x7f00000002c0)) 16:24:35 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x14000) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x240) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x9, 0xffff, 0x2e, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x700, 0x9, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0xb6, &(0x7f0000000280)=""/182, 0x40f00, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x9, 0x7}, 0x10}, 0x78) 16:24:35 executing program 1: socketpair(0x2, 0x6, 0x7d00, &(0x7f00000002c0)) 16:24:35 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x110, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x7ff) 16:24:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000980)={{0x0, 0x5, 0xff, 0x3ff, 0x0, 0x3ff, 0xf69, 0x400, 0x9eacddc6, 0x7, 0xffffffcf, 0x6, 0x0, 0x8d1, 0x400}}) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 16:24:36 executing program 0: socketpair(0x22, 0x3, 0x1c9, &(0x7f00000002c0)) 16:24:36 executing program 3: socketpair(0x2, 0x6, 0x7d01, &(0x7f00000002c0)) 16:24:36 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xe7b) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x4, {0xa, 0x4e22, 0x7, @empty, 0x3}}}, 0x38) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000002c0)={0x6, 0x8, {r2}, {r0}, 0x5, 0x9}) 16:24:36 executing program 4: r0 = syz_io_uring_complete(0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)="f119cf3001dd3edb783421378d0cfa27d931"}, 0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x20, 0xfffffffe}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r5, r0, r1, r6], 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) r7 = syz_io_uring_complete(r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)="4d0fb33d0c5a28bf52369c9f741a51d30bb2a86c805afa9589d8ff63fcf8344aa8b4c5631cefb380450198dcbd1056f3ab56fa04a2cc19529d9d046f898881bdeee1d889c3d84fea213ea8d3db09c99d", &(0x7f0000000140)=@udp6=r0}, 0x20) 16:24:36 executing program 1: socketpair(0x2, 0x6, 0x7d01, &(0x7f00000002c0)) 16:24:36 executing program 5: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0xffffffffffffffff) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), 0x4) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd, 0x2, 0x8, 0x6, 0x0, 0x1}, 0xffffff01) socket$nl_generic(0x10, 0x3, 0x10) 16:24:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_io_uring_setup(0x7, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={r2, r3+10000000}, 0x1, 0x1, 0x1, {0x0, r5}}, 0x2e) 16:24:36 executing program 0: socketpair(0x22, 0x3, 0x1ca, &(0x7f00000002c0)) 16:24:36 executing program 1: socketpair(0x2, 0x6, 0x7e00, &(0x7f00000002c0)) 16:24:36 executing program 3: socketpair(0x2, 0x6, 0x7e00, &(0x7f00000002c0)) 16:24:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x2, &(0x7f0000000080)={'syztnl2\x00', 0x0}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) r3 = getpgrp(0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000100)={0x1, 0x9, {r3}, {}, 0x3, 0x9}) syz_open_dev$dri(&(0x7f00000000c0), 0x3f, 0x380) 16:24:36 executing program 0: socketpair(0x22, 0x3, 0x1cb, &(0x7f00000002c0)) 16:24:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000006b00)) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1, @private1, 0x8}}}, 0x30) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0x90) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"34b82a1e383ff54336a156d43961d2e4", 0x0, 0x0, {0x8, 0x51}, {0x0, 0x2}, 0x98d, [0xfffffffffffff93d, 0x6fa, 0x85, 0x1f, 0x3, 0x1, 0x1000, 0x0, 0x1, 0x1, 0x2, 0x8, 0x5, 0x3, 0x9, 0x9]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000006b00)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000006b00)) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r3}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000001500)={0x4, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x2, 0xfffffffe, "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", 0x0, 0x8, 0xff, 0x0, 0xfc, 0x1f, 0x3}, r7}}, 0x120) 16:24:36 executing program 1: socketpair(0x2, 0x6, 0x7e01, &(0x7f00000002c0)) 16:24:36 executing program 3: socketpair(0x2, 0x6, 0x7e01, &(0x7f00000002c0)) 16:24:37 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x3, 0x3, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000080), 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x49}, 0x0) 16:24:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:24:37 executing program 0: socketpair(0x22, 0x3, 0x1cc, &(0x7f00000002c0)) 16:24:37 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6502, 0x0) 16:24:37 executing program 1: socketpair(0x2, 0x6, 0x7f00, &(0x7f00000002c0)) 16:24:37 executing program 3: socketpair(0x2, 0x6, 0x7f00, &(0x7f00000002c0)) 16:24:37 executing program 0: socketpair(0x22, 0x3, 0x1cd, &(0x7f00000002c0)) 16:24:37 executing program 3: socketpair(0x2, 0x6, 0x7f01, &(0x7f00000002c0)) 16:24:37 executing program 2: setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0xfffffffd, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:37 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x6440, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 16:24:37 executing program 1: socketpair(0x2, 0x6, 0x7f01, &(0x7f00000002c0)) 16:24:37 executing program 0: socketpair(0x22, 0x3, 0x1ce, &(0x7f00000002c0)) 16:24:38 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x7fffffff, 0x0, 0x80, 0xffffffff, 0x114, 0x1ff, 0x426, 0x7f, 0x9a5}) 16:24:38 executing program 1: socketpair(0x2, 0x6, 0x8100, &(0x7f00000002c0)) 16:24:38 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x446400, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) 16:24:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 16:24:38 executing program 3: socketpair(0x2, 0x6, 0x8100, &(0x7f00000002c0)) 16:24:38 executing program 0: socketpair(0x22, 0x3, 0x1cf, &(0x7f00000002c0)) 16:24:38 executing program 3: socketpair(0x2, 0x6, 0x8101, &(0x7f00000002c0)) 16:24:38 executing program 1: socketpair(0x2, 0x6, 0x8101, &(0x7f00000002c0)) 16:24:38 executing program 0: socketpair(0x22, 0x3, 0x1d0, &(0x7f00000002c0)) 16:24:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:38 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6602, 0x0) 16:24:38 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x43) 16:24:38 executing program 1: socketpair(0x2, 0x6, 0x8200, &(0x7f00000002c0)) 16:24:38 executing program 0: socketpair(0x22, 0x3, 0x1d1, &(0x7f00000002c0)) 16:24:38 executing program 3: socketpair(0x2, 0x6, 0x8200, &(0x7f00000002c0)) 16:24:38 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 16:24:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2021) 16:24:38 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:38 executing program 0: socketpair(0x22, 0x3, 0x1d2, &(0x7f00000002c0)) 16:24:38 executing program 1: socketpair(0x2, 0x6, 0x8201, &(0x7f00000002c0)) 16:24:38 executing program 3: socketpair(0x2, 0x6, 0x8201, &(0x7f00000002c0)) 16:24:38 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x900) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x29d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x75ce, &(0x7f0000000140)={0x0, 0x7127, 0x0, 0x3, 0x29f, 0x0, r0}, &(0x7f0000400000/0xc00000)=nil, &(0x7f00009a0000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r1, 0x867, 0x0, 0x401, 0x0, 0x1}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) getsockopt$inet6_dccp_int(r1, 0x21, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0xa, 0x2}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r8 = eventfd2(0x3ceb5d8, 0x40800) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r2, r6, 0xffffffffffffffff, r7, r1, r8, r2], 0xa) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x64, 0x1}) 16:24:38 executing program 2: socketpair(0x2, 0x5, 0x5, &(0x7f0000000000)) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xffffffffffffffd7}, 0x40002022) 16:24:38 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 16:24:38 executing program 0: socketpair(0x22, 0x3, 0x1d3, &(0x7f00000002c0)) 16:24:38 executing program 3: socketpair(0x2, 0x6, 0x8300, &(0x7f00000002c0)) 16:24:38 executing program 1: socketpair(0x2, 0x6, 0x8300, &(0x7f00000002c0)) 16:24:39 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r1}) 16:24:39 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000141) 16:24:39 executing program 0: socketpair(0x22, 0x3, 0x1d4, &(0x7f00000002c0)) 16:24:39 executing program 1: socketpair(0x2, 0x6, 0x8301, &(0x7f00000002c0)) 16:24:39 executing program 3: socketpair(0x2, 0x6, 0x8301, &(0x7f00000002c0)) 16:24:39 executing program 2: r0 = syz_io_uring_complete(0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffea4, 0x0, 0xffffffffffffffbd}, 0x2002) 16:24:39 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_complete(0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000300)="47bb112dedf4828f00d2199af2477cfe36715ab80b7d017d3ae3e35b650cbebf32ab04351ba0575647c20aed608a7a29a18268cbb495375d8ba59f315af48d428e494cd7c1e1fc754a237383cf8d6204a1509accb423a06ab5726a94d2d2917c32e4ac1d5dbdeec9d9e9313d26c7d47362765eb77f15ccc2c3264d075c96075759c071a147040ad44d2e6eabe11ba211e01ceae5406bffc275f0133a63de8beae70d612274e31d2dd658a24e004953a66a92d944f253094a66ca678abb8740fe0dca0b16e7fbdcb58b19b2", 0xcb) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:39 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000100), 0x2}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x27d4, &(0x7f0000000080)={0x0, 0x4705, 0x8, 0xfffffffd, 0xa8, 0x0, r0}) 16:24:39 executing program 2: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000440)={0x4, 0xb, 0x4, 0x2000, 0x1f, {}, {0x1, 0x8, 0xff, 0x80, 0x0, 0x9, "e04b804c"}, 0x10000, 0x2, @userptr=0x9, 0x78}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x200, 0x208881) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001980)={0x0, 0x800}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/204, 0xcc}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f00000001c0)=""/150, 0x96}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)}], 0x7) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000380), &(0x7f00000004c0)=0x4) 16:24:39 executing program 0: socketpair(0x22, 0x3, 0x1d5, &(0x7f00000002c0)) 16:24:39 executing program 1: socketpair(0x2, 0x6, 0x8400, &(0x7f00000002c0)) 16:24:39 executing program 3: socketpair(0x2, 0x6, 0x8400, &(0x7f00000002c0)) 16:24:39 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x15, 0x6, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000400000000000400000080ab0101090000009ff850000900000085000000780000009500000000000000"], &(0x7f0000001340)='GPL\x00', 0x3, 0xff4, &(0x7f0000001380)=""/4084, 0x41100, 0xd, '\x00', 0x0, 0xb, r0, 0x8, &(0x7f0000002380)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000023c0)={0x5, 0xf, 0x805, 0xffff0000}, 0x10, 0xffffffffffffffff}, 0x78) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002480)={r2, r3, 0x11}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff04, 0x0, 0x42}, 0x10021) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r4, &(0x7f0000001280)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000001200)=[{&(0x7f0000001240)=""/37, 0x25}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/198, 0xc6}], 0x3, &(0x7f00000024c0)=""/62, 0x3e}, 0x16102) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002500), 0x40100, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002680)={r5, 0x10, &(0x7f0000002640)={&(0x7f0000002540)=""/226, 0xe2, 0x0}}, 0x10) accept$phonet_pipe(r0, &(0x7f00000048c0), &(0x7f0000004900)=0x10) r7 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000004800)=[{&(0x7f00000026c0)=""/83, 0x53}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/66, 0x42}, {&(0x7f00000047c0)=""/64, 0x40}], 0x5) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004880)=r6, 0x4) 16:24:39 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0xfffffffffffffffc, 0xd4341, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000007, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r2, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:24:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000001500)={0x4, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe48}, r1}}, 0x30) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:39 executing program 0: socketpair(0x22, 0x3, 0x1d6, &(0x7f00000002c0)) 16:24:39 executing program 1: socketpair(0x2, 0x6, 0x8401, &(0x7f00000002c0)) 16:24:39 executing program 3: socketpair(0x2, 0x6, 0x8401, &(0x7f00000002c0)) 16:24:39 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40012000) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000380)=0x7fffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000200)=""/172, 0xac}, {&(0x7f00000002c0)=""/169, 0xa9}], 0x4) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) 16:24:39 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10000) 16:24:39 executing program 1: socketpair(0x2, 0x6, 0x8500, &(0x7f00000002c0)) 16:24:39 executing program 0: socketpair(0x22, 0x3, 0x1d7, &(0x7f00000002c0)) 16:24:39 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x0, 0xf966, 0x1ff, 0x400, 0xfffffffffffffffd, 0x869, 0x1000, 0xfffffbce, 0x3, 0x7, 0x4, 0xd8, 0x6, 0x10000}}) 16:24:39 executing program 3: socketpair(0x2, 0x6, 0x8500, &(0x7f00000002c0)) 16:24:39 executing program 1: socketpair(0x2, 0x6, 0x8501, &(0x7f00000002c0)) 16:24:39 executing program 0: socketpair(0x22, 0x3, 0x1d8, &(0x7f00000002c0)) 16:24:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002003) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x7fffffff, 0x0, &(0x7f0000000300)=[r0]}, 0x1) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x7, 0x3, 0x4, 0x3000, 0xb3, {0x0, 0x2710}, {0x5, 0x1, 0x1f, 0x9f, 0x1, 0xc9, "4be1bfdd"}, 0xb7, 0x1, @userptr=0x81, 0x7, 0x0, 0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f00000002c0), 0x1, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"ee1c0a98562da425278f2afa12fe8882", 0x0, 0x0, {0x5, 0x6}, {0x100000000, 0x5}, 0x0, [0x80000001, 0x2, 0x5, 0x5, 0x424, 0xfb, 0x2, 0x9, 0xd6, 0x6, 0x3ff, 0x20, 0x6, 0x49000000, 0x4, 0x10001]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"57c3da35cbdc300ec9b6398ccfd98ee6", r2, 0x0, {0x120000000000000, 0x3}, {0x2, 0x7}, 0x8001, [0x20000000000001, 0x80000000, 0x7, 0x6, 0x9, 0x3, 0x200, 0x8, 0x9, 0x5, 0x1, 0x6e04, 0x1, 0x4, 0x2, 0x1ff]}) 16:24:39 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x50, 0x3, 0x0, 0x0, "5dce6f22811a31ea6b1bc3a4aba1c923632f8325e02cb3dc306260c4f15fd42cb07319634d445e9bb3ce981b083f5e635539560c1d4f0fb30efe2739e4ef947c"}, 0x48}}, 0x4000000) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x3, 0x1, 0x2, 0x6ae, 0x0, r1, 0x1000, '\x00', 0x0, r1, 0x0, 0x1, 0x1}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240)="deeab5271507c5fcc67989a6abe32a4b887ca666ae358327e529d71f5691b0a0c535aed6a32871ed06f12e1945bfa236a1dc214b051875171e44c42df84f6fabc5b9ac4cca01c68ac87fad705b2a4f9ee3a501ba58adc3ba7f46c812442d3ebdaf7474eb6c9b4c208c062c74f4623c001eb7b3ed8d03f510528c4a670c1be1ada60b713610ec10c7e9f53081d00b10c23adfd1adfdb94bd9836b03faf4ab5c44a13b9265c8"}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', r1}, 0x10) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) 16:24:40 executing program 5: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0x1, &(0x7f0000000080)="75fa102bccb935d7d76b5dd8faa0623571737d7855541f9e978ff7d608d469a3612c60ce129bdd628f8c8d1c2493d361a2bfda1bd607f43c3189c0734d138f40e8efe228810e6d5daf596d6812dc033b55602b66ba5242af53119ab511b6815030e8c82d7f07e828461888222c843d3fff187e81b3", &(0x7f0000000100)=""/240}, 0x20) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:40 executing program 3: socketpair(0x2, 0x6, 0x8501, &(0x7f00000002c0)) 16:24:40 executing program 1: socketpair(0x2, 0x6, 0x8600, &(0x7f00000002c0)) 16:24:40 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) 16:24:40 executing program 2: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e24, 0x1, @private0, 0x2}}}, 0x38) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:40 executing program 0: socketpair(0x22, 0x3, 0x1d9, &(0x7f00000002c0)) 16:24:40 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x484282, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, 0xb9c, 0x2, 0x9, 0x4800000, 0xffff, 0x5, 0x10000, 0x7ff, 0x80000001, 0x4d, 0xffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) 16:24:40 executing program 3: socketpair(0x2, 0x6, 0x8600, &(0x7f00000002c0)) 16:24:40 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10122) 16:24:40 executing program 1: socketpair(0x2, 0x6, 0x8601, &(0x7f00000002c0)) 16:24:40 executing program 0: socketpair(0x22, 0x3, 0x1da, &(0x7f00000002c0)) 16:24:40 executing program 2: bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000008c0)=0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x0, 0x3, 0x3, 0x5, 0xfffffffffffffff8, 0xffffffffffffffff}, @map={0x18, 0x4, 0x1, 0x0, r1}]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x88, &(0x7f00000001c0)=""/136, 0x40f00, 0x19, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xb, 0x1, 0x4}, 0x10, 0xffffffffffffffff}, 0x78) r3 = socket$can_raw(0x1d, 0x3, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000003) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) 16:24:40 executing program 3: socketpair(0x2, 0x6, 0x8601, &(0x7f00000002c0)) 16:24:40 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xfffffffffffffa99, 0x20a01) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1}) 16:24:40 executing program 1: socketpair(0x2, 0x6, 0x8700, &(0x7f00000002c0)) 16:24:40 executing program 0: socketpair(0x22, 0x3, 0x1db, &(0x7f00000002c0)) 16:24:40 executing program 3: socketpair(0x2, 0x6, 0x8700, &(0x7f00000002c0)) 16:24:40 executing program 1: socketpair(0x2, 0x6, 0x8701, &(0x7f00000002c0)) 16:24:40 executing program 0: socketpair(0x22, 0x3, 0x1dc, &(0x7f00000002c0)) 16:24:40 executing program 5: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000080)=""/242, 0xf2}, {&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/96, 0x60}, {&(0x7f0000000300)=""/255, 0xff}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f00000004c0)=""/247, 0xf7}], 0x7) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000680)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000700)={&(0x7f00000006c0)=[r0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) 16:24:41 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x2}, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0xf, 0x20, 0x7}, &(0x7f0000000100)=0x8001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x3}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:41 executing program 3: socketpair(0x2, 0x6, 0x8701, &(0x7f00000002c0)) 16:24:41 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) 16:24:41 executing program 2: syz_io_uring_setup(0x7339, &(0x7f0000000000)={0x0, 0x80f, 0x10, 0x2, 0x130}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:41 executing program 1: socketpair(0x2, 0x6, 0x8800, &(0x7f00000002c0)) 16:24:41 executing program 0: socketpair(0x22, 0x3, 0x1dd, &(0x7f00000002c0)) 16:24:41 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, r1], 0x3}) 16:24:41 executing program 3: socketpair(0x2, 0x6, 0x8800, &(0x7f00000002c0)) 16:24:41 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = io_uring_setup(0x7b3f, &(0x7f0000000040)={0x0, 0x46f0, 0x28, 0x0, 0x1b}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000000c0)) 16:24:41 executing program 0: socketpair(0x22, 0x3, 0x1de, &(0x7f00000002c0)) 16:24:41 executing program 1: socketpair(0x2, 0x6, 0x8801, &(0x7f00000002c0)) 16:24:41 executing program 3: socketpair(0x2, 0x6, 0x8801, &(0x7f00000002c0)) 16:24:41 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) 16:24:41 executing program 1: socketpair(0x2, 0x6, 0x8900, &(0x7f00000002c0)) 16:24:41 executing program 3: socketpair(0x2, 0x6, 0x8900, &(0x7f00000002c0)) 16:24:41 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01064c2, &(0x7f0000000180)={r3, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[r6, r3], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[r6], &(0x7f0000000280)=[r1, r1], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000300)={r6, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000340)={r7, 0x1}) syz_open_dev$dri(&(0x7f0000000380), 0x1000, 0x48240) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000140)={r8, r6, r0, r5, 0x4}) 16:24:41 executing program 0: socketpair(0x22, 0x3, 0x1df, &(0x7f00000002c0)) 16:24:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getpgrp(0xffffffffffffffff) waitid(0x1, r2, &(0x7f0000000340), 0x4, 0x0) waitid(0x2, r2, &(0x7f0000000340), 0x4, 0x0) r3 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x20, 0x2, {r1}, {r3}, 0xe21b, 0x8}) 16:24:41 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @multicast2}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 16:24:41 executing program 1: socketpair(0x2, 0x6, 0x8901, &(0x7f00000002c0)) 16:24:41 executing program 0: socketpair(0x22, 0x3, 0x1e0, &(0x7f00000002c0)) 16:24:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2181) sysinfo(&(0x7f0000000480)=""/266) sysinfo(&(0x7f0000000000)=""/45) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) 16:24:41 executing program 3: socketpair(0x2, 0x6, 0x8901, &(0x7f00000002c0)) 16:24:41 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x29d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, 0x0, 0x0, 0x4) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd, 0x5f0, 0x0, 0x7, 0x0, 0x1}, 0x1000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:41 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 16:24:42 executing program 0: socketpair(0x22, 0x3, 0x1e1, &(0x7f00000002c0)) 16:24:42 executing program 1: socketpair(0x2, 0x6, 0x8a00, &(0x7f00000002c0)) 16:24:42 executing program 3: socketpair(0x2, 0x6, 0x8a00, &(0x7f00000002c0)) 16:24:42 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xffffffffffffff0d, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000c3a27d7c5d434272003cf30c4e421adb5e15e5d5e88d000748e44a7cf9afd5d4aea60807fbb081866a31f469ecf6b52c7ee56561e13d9e1339cae57862f9938434bcf0609c2a5b2d6921bf67df2c2146f492baac54f035712b866ddfeba3de4164b863a53fab10275aad3031e8de", @ANYRES32=r4, @ANYRESDEC=r5, @ANYBLOB="49e133b6", @ANYRES16=0x0, @ANYRES32=r1, @ANYRES64=r2, @ANYBLOB="e04f88a86883f95e3a4f67f57966a71c21cf9cb193fe499584308d1585bc1e2fb37ae1a9ffb3a2b550e146dc1685c776efba2116dc7483", @ANYRES32=r0], 0x24}}, 0x8000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10102) 16:24:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0xf9db99c4c163049d}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:42 executing program 0: socketpair(0x22, 0x3, 0x1e2, &(0x7f00000002c0)) 16:24:42 executing program 1: socketpair(0x2, 0x6, 0x8a01, &(0x7f00000002c0)) 16:24:42 executing program 3: socketpair(0x2, 0x6, 0x8a01, &(0x7f00000002c0)) 16:24:42 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xfc, 0x0, 0x1c, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x700, 0x5, 0x101}}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x1d, r0}, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "7262573cbb457e62"}, 0x10}, 0x1, 0x0, 0x0, 0x24000810}, 0x800) 16:24:42 executing program 1: socketpair(0x2, 0x6, 0x8b00, &(0x7f00000002c0)) 16:24:42 executing program 3: socketpair(0x2, 0x6, 0x8b00, &(0x7f00000002c0)) 16:24:42 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x282140) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x14, 0x5, r1}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000b00)=0xe8) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)={0xb, 0x25b6cec2, 0x2, 0x3, 0x1184, r0, 0x3, '\x00', r2, r3, 0x4, 0x1}, 0x40) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket(0x11, 0x80000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x98e, 0x0, 0x0, 0x0, 0x6864}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @alu={0x3, 0x0, 0x8, 0x9, 0x9, 0x1, 0x10}, @map={0x18, 0x9}, @map={0x18, 0x4, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5}, @generic={0x8, 0xb, 0x0, 0x8d, 0x3f}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000140)='syzkaller\x00', 0x10001, 0x92, &(0x7f0000000180)=""/146, 0x41100, 0x8, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x9, 0x7}, 0x10, 0x0, r1}, 0x78) recvmsg$can_raw(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x41) 16:24:42 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x6a6000, 0x0) 16:24:42 executing program 0: socketpair(0x22, 0x3, 0x1e3, &(0x7f00000002c0)) 16:24:42 executing program 1: socketpair(0x2, 0x6, 0x8b01, &(0x7f00000002c0)) 16:24:43 executing program 0: socketpair(0x22, 0x3, 0x1e4, &(0x7f00000002c0)) 16:24:43 executing program 3: socketpair(0x2, 0x6, 0x8b01, &(0x7f00000002c0)) 16:24:43 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) recvmsg$can_j1939(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f00000005c0)=""/180, 0xb4}, {&(0x7f0000000680)=""/204, 0xcc}, {&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/137, 0x89}], 0x7, &(0x7f0000000940)=""/188, 0xbc}, 0x40000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x7, 0x9, 0x62, 0xc4d, r0, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x40) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{0x0, 0x6, 0xfffffffffffffffd, 0x20, 0x9b, 0x5, 0x0, 0x8, 0xa8, 0x40, 0x3f, 0x87, 0x8, 0x2, 0x200000000000000}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYBLOB="08000000000000000000000001000000000000000100000004000000000000000900000000000000fcffffffffffffff0100000000800000010000000000a000f8ffffffffffffff010000000000008eded4986bfb1900368a00000000000006000000000000002000"/136]) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xa, 0x2, 0x77ef00}, 0x10, r3}, 0x78) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:43 executing program 1: socketpair(0x2, 0x6, 0x8c00, &(0x7f00000002c0)) 16:24:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1f, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}, 0x5) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2122) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r3, 0x1e}, 0x10) 16:24:43 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000a00)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000a80)=0x80) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000ac0)=0x1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000700)={&(0x7f0000000080)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/158, 0x9e}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f0000000000)=""/24, 0x18}], 0x7, &(0x7f0000000640)=""/191, 0xbf}, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) 16:24:43 executing program 0: socketpair(0x22, 0x3, 0x1e5, &(0x7f00000002c0)) 16:24:43 executing program 1: socketpair(0x2, 0x6, 0x8c01, &(0x7f00000002c0)) 16:24:43 executing program 3: socketpair(0x2, 0x6, 0x8c00, &(0x7f00000002c0)) 16:24:43 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x121140, 0x0) 16:24:43 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) recvmsg$can_raw(r0, &(0x7f0000000080)={0x0, 0xffe7, 0x0, 0x2f}, 0x40010142) 16:24:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:43 executing program 0: socketpair(0x22, 0x3, 0x1e6, &(0x7f00000002c0)) 16:24:43 executing program 1: socketpair(0x2, 0x6, 0x8d00, &(0x7f00000002c0)) 16:24:43 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40010161) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) 16:24:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x1a100) r1 = io_uring_setup(0x1f90, &(0x7f0000000000)={0x0, 0xcb9d, 0x10, 0x0, 0x28f}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000980)={0x0, 0x8}) 16:24:43 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000200)={r2}) r4 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000280)={r2, 0x0, r4}) 16:24:43 executing program 3: socketpair(0x2, 0x6, 0x8c01, &(0x7f00000002c0)) 16:24:43 executing program 0: socketpair(0x22, 0x3, 0x1e7, &(0x7f00000002c0)) 16:24:43 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000080)=0x4) r1 = socket(0x1, 0x800, 0x81) recvmsg$can_raw(r1, &(0x7f0000000300)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000040)=""/1, 0x1}, {&(0x7f0000000240)=""/113, 0x71}], 0x3}, 0x24) syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) socket(0x0, 0x4, 0x4357) 16:24:43 executing program 1: socketpair(0x2, 0x6, 0x8d01, &(0x7f00000002c0)) 16:24:43 executing program 3: socketpair(0x2, 0x6, 0x8d00, &(0x7f00000002c0)) 16:24:43 executing program 0: socketpair(0x22, 0x3, 0x1e8, &(0x7f00000002c0)) 16:24:43 executing program 1: socketpair(0x2, 0x6, 0x8e00, &(0x7f00000002c0)) 16:24:43 executing program 2: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x9, &(0x7f0000000200)={0x0, 0x40000000, 0x4, 0x0, 0x2}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_complete(r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) accept(r4, &(0x7f0000000100)=@rc={0x1f, @none}, &(0x7f0000000180)=0x80) accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) read$usbmon(r3, 0x0, 0x0) read$usbmon(r3, &(0x7f0000000040)=""/27, 0x1b) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 16:24:43 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7, 0x7, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x8, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000500)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000480)=[0x0, r2, 0x0, r3, 0x0, r4, 0x0, r5, 0x0, r6], 0x9, 0x2, 0x2}) r7 = syz_open_dev$mouse(&(0x7f0000000180), 0x3f, 0xc4080) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r7, 0x8000000) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f00000000c0)={0x291, 0xfffffeff, {0xffffffffffffffff}, {}, 0x6, 0x1}) 16:24:43 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[r1]}, 0x1) 16:24:43 executing program 0: socketpair(0x22, 0x3, 0x1e9, &(0x7f00000002c0)) 16:24:43 executing program 3: socketpair(0x2, 0x6, 0x8d01, &(0x7f00000002c0)) 16:24:43 executing program 1: socketpair(0x2, 0x6, 0x8e01, &(0x7f00000002c0)) 16:24:44 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x8000000) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:44 executing program 3: socketpair(0x2, 0x6, 0x8e00, &(0x7f00000002c0)) 16:24:44 executing program 0: socketpair(0x22, 0x3, 0x1ea, &(0x7f00000002c0)) 16:24:44 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)={0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x410a40, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f0000000280)={&(0x7f0000000240), 0x1, 0x0, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f00000001c0)={&(0x7f0000000180)=[r2, 0x0, r4, 0x0, r5, r6, 0x0, r7], 0x800, 0x8, 0x5}) 16:24:44 executing program 1: socketpair(0x2, 0x6, 0x8f00, &(0x7f00000002c0)) 16:24:44 executing program 3: socketpair(0x2, 0x6, 0x8e01, &(0x7f00000002c0)) 16:24:44 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:44 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x22440, 0x0) 16:24:44 executing program 0: socketpair(0x22, 0x3, 0x1eb, &(0x7f00000002c0)) 16:24:44 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002121) 16:24:44 executing program 1: socketpair(0x2, 0x6, 0x8f01, &(0x7f00000002c0)) 16:24:44 executing program 3: socketpair(0x2, 0x6, 0x8f00, &(0x7f00000002c0)) 16:24:44 executing program 1: socketpair(0x2, 0x6, 0x9000, &(0x7f00000002c0)) 16:24:44 executing program 3: socketpair(0x2, 0x6, 0x8f01, &(0x7f00000002c0)) 16:24:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040)="529c39094e1fc93021da76091b3e485dd3afa8278a808ea270638d24b5fe827184abf2a47493841e4cd842dbcdff08a16a844c1272d03ab3240a6371b431fe40ec14b0a1f8993467a31bb050c0ccce39feb3fd3c7919b6f100b8efa9f1a8e9943df6fca7f8", &(0x7f00000000c0)=@udp6=r2}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:44 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000100)="9a8fcc7c1414daa8fd7948f9d0a15f24901f5a24f27814", &(0x7f0000000140)=""/52}, 0x20) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0], 0x9}) 16:24:45 executing program 0: socketpair(0x22, 0x3, 0x1ec, &(0x7f00000002c0)) 16:24:45 executing program 1: socketpair(0x2, 0x6, 0x9001, &(0x7f00000002c0)) 16:24:45 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000001380)={0x80000000, 0x1, 0x4, 0x20, 0x20, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0x0, 0xf7, 0x1, "2a2b0090"}, 0x3, 0x3, @userptr=0x8b, 0x6, 0x0, r4}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:24:45 executing program 3: socketpair(0x2, 0x6, 0x9000, &(0x7f00000002c0)) 16:24:45 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 16:24:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[r1]}, 0x1) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) io_uring_enter(0xffffffffffffffff, 0x6772, 0x149a, 0x3, &(0x7f0000000180)={[0x9]}, 0x8) 16:24:45 executing program 0: socketpair(0x22, 0x3, 0x1ed, &(0x7f00000002c0)) 16:24:45 executing program 1: socketpair(0x2, 0x6, 0x9100, &(0x7f00000002c0)) 16:24:45 executing program 3: socketpair(0x2, 0x6, 0x9001, &(0x7f00000002c0)) 16:24:45 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "e27506", "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"}}, 0xffffffffffffff9a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:45 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x61) 16:24:45 executing program 0: socketpair(0x22, 0x3, 0x1ee, &(0x7f00000002c0)) 16:24:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f00000010c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000001180)={&(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, r3], 0x6, 0x8, 0x2}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000080)={{0x0, 0x4, 0x3ff, 0x3, 0x5, 0x81, 0x2, 0x4, 0x5, 0x8, 0x6, 0xffffffffffffffc0, 0x9, 0x18a, 0x4}}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001080)=r5, 0x4) 16:24:45 executing program 1: socketpair(0x2, 0x6, 0x9101, &(0x7f00000002c0)) 16:24:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xef9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6085}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000140), &(0x7f00000003c0)=0x4) 16:24:45 executing program 3: socketpair(0x2, 0x6, 0x9100, &(0x7f00000002c0)) 16:24:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) 16:24:45 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="ff0f00000000000073fa0000000000000101000000000000c10b0000000000000500000000000000040000000000000055090000070000000000000040000000ffffff7f0000000007000000008000002000000000000000ff010000000000003000"/152]) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x57, @private1, 0x1}}}, 0x30) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000001500)={0x4, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r2, 0x0, "cd5ea8", "c516163ddc17bc873ff277e852cd4daccd95d1817608320c9e453503ef95e7795e1cd66a5a728b7aa54484a129036f2e92903e08b5108cfb698611eff1609b57e6cde4a686aeab02ab9113147dfa20fd5d2bb8f8357c61dfd1a24a25b46afdf824380f5ec9a157413df2556d7a6f3d0fe8824d54368ba4414af0396eef8d577a79cc128760d55d0b798474f9093086e9b3313704100c8e624ea14f1b22b4bf6e070c532e3485a12f9472e5d7afde1aeb676aeae42a16035cbc40dabdd88b980675f51be51c4328ee1223d2e148d992c6981987d04f13f8d6d4568c1d9921ff921832464d9cb0b1b8e21fb893e6f87565fb5def27fce91ba2b6918d0e8114ae9f"}}, 0x110) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000001500)={0x4, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r5, 0x1}}, 0x10) recvmsg$can_raw(r3, &(0x7f0000000940)={0x0, 0x3c, 0x0, 0x700}, 0x0) 16:24:45 executing program 0: socketpair(0x22, 0x3, 0x1ef, &(0x7f00000002c0)) 16:24:45 executing program 4: msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000080)=""/29) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/92) 16:24:45 executing program 1: socketpair(0x2, 0x6, 0x9200, &(0x7f00000002c0)) 16:24:45 executing program 3: socketpair(0x2, 0x6, 0x9101, &(0x7f00000002c0)) 16:24:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xffffffff, 0x8000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r2}) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1}) rt_sigtimedwait(&(0x7f0000000100)={[0x1]}, &(0x7f0000000140), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) 16:24:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:45 executing program 0: socketpair(0x22, 0x3, 0x1f0, &(0x7f00000002c0)) 16:24:45 executing program 1: socketpair(0x2, 0x6, 0x9201, &(0x7f00000002c0)) 16:24:45 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) socketpair(0x2a, 0x1, 0x81, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0xa8, 0x6f, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xc889dfcd63f55821, 0x8000, 0x0, 0x4}}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfde}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 16:24:45 executing program 3: socketpair(0x2, 0x6, 0x9200, &(0x7f00000002c0)) 16:24:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 16:24:46 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 16:24:46 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x6480, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)}) 16:24:46 executing program 0: socketpair(0x22, 0x3, 0x1f1, &(0x7f00000002c0)) 16:24:46 executing program 1: socketpair(0x2, 0x6, 0x9300, &(0x7f00000002c0)) 16:24:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = syz_io_uring_setup(0x35d1, &(0x7f0000000000)={0x0, 0x7b65, 0x4, 0x3, 0x3e4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000280)=""/170, 0xaa}], 0x4) 16:24:46 executing program 3: socketpair(0x2, 0x6, 0x9201, &(0x7f00000002c0)) 16:24:46 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000007c0)={&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/23, 0x17}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000540)=""/146, 0x92}, {&(0x7f0000000600)=""/52, 0x34}], 0x6, &(0x7f00000006c0)=""/200, 0xc8}, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000006b00)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x80, 0x4, "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", 0x8, 0x3, 0x7, 0x80, 0x3, 0x6, 0x4}, r2}}, 0x120) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x84204, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 16:24:46 executing program 0: socketpair(0x22, 0x3, 0x1f2, &(0x7f00000002c0)) 16:24:46 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x3, 0x4c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x20, 0x8000, 0x10000, 0x2}}) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)={0xe7d, 0x1, 0x4, 0x800, 0x8, {r2, r3/1000+60000}, {0x2, 0x1, 0x8, 0x1, 0x10, 0x4, "4ffcad2c"}, 0x6, 0x3, @offset=0x80, 0x7, 0x0, r1}) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x8000000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r1, r5}, 0xc) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)={0x9, 0x2, 0x4, 0x2000, 0x9, {}, {0x2, 0x1, 0x3, 0x7, 0xe0, 0x3, "f809e132"}, 0x5, 0x1, @userptr=0x1, 0x1, 0x0, r4}) 16:24:46 executing program 1: socketpair(0x2, 0x6, 0x9301, &(0x7f00000002c0)) 16:24:46 executing program 0: socketpair(0x22, 0x3, 0x1f3, &(0x7f00000002c0)) 16:24:46 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) 16:24:46 executing program 3: socketpair(0x2, 0x6, 0x9300, &(0x7f00000002c0)) 16:24:46 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:46 executing program 1: socketpair(0x2, 0x6, 0x9400, &(0x7f00000002c0)) 16:24:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0xfffffc00, 0x0, &(0x7f0000000000)=[r1]}, 0x1) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000080)="c1d174f98b11", &(0x7f0000000180)=""/220, &(0x7f0000000280)="10c0c5c41497b0a0f47b9cb1f56636bbf7fb4fadc7888e74a5c31b58901a4797249cd4347496c811cdff9a50ea37aed8926ede7ff3def75f77c728097f2cddc6f9dd0cd41531bdd4c3dcda7ad49271420db627f19f99a916978143cb8932c35f88c4534a7e72059c86de2c9e14c0540a2db9b5ec129639f114894359643c67366268", &(0x7f0000000340)="3861c46ae7b4770b51d39d6c8d69fa9e0ecf26dc3296aaabf360f226cf7f6be4cf0df076d507726780b035825f626158f5ff53acd8d38e6a74cecc8bfebb6ec7448f442c7bc6b49c528abf0f82", 0x6, r2}, 0x38) 16:24:46 executing program 3: socketpair(0x2, 0x6, 0x9301, &(0x7f00000002c0)) 16:24:46 executing program 0: socketpair(0x22, 0x3, 0x1f4, &(0x7f00000002c0)) 16:24:47 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x66282, 0x0) 16:24:47 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept(r0, &(0x7f0000001040)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000010c0)=0x80) bind$can_raw(r0, &(0x7f0000001100)={0x1d, r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x77, 0x10, 0x700, 0x34, @dev={0xfe, 0x80, '\x00', 0xc}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x1, 0x85}}) r3 = syz_io_uring_complete(0x0) recvmsg$can_raw(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001380)=""/97, 0x61}, {&(0x7f0000001400)=""/100, 0x64}, {&(0x7f0000001480)=""/207, 0xcf}, {&(0x7f0000001580)=""/69, 0x45}, {&(0x7f0000001600)=""/87, 0x57}, {&(0x7f0000001680)=""/28, 0x1c}, {&(0x7f00000016c0)=""/225, 0xe1}, {&(0x7f00000017c0)=""/99, 0x63}], 0x8}, 0x40000000) 16:24:47 executing program 1: socketpair(0x2, 0x6, 0x9401, &(0x7f00000002c0)) 16:24:47 executing program 2: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x16, 0x1, 0x8, 0x5, 0x22, 0x1, 0x3, '\x00', r0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x40) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2c300, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000980)="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", 0x1000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@restrict={0x10, 0x0, 0x0, 0xb, 0x1}, @struct={0xb, 0x8, 0x0, 0x4, 0x0, 0x7, [{0x10, 0x3, 0x7fffffff}, {0x4, 0x5, 0x9}, {0x5, 0x1, 0x5}, {0x6, 0x5, 0xc}, {0x8, 0x5, 0x1}, {0xb, 0x1, 0x9}, {0x0, 0x4, 0x289}, {0xd, 0x1, 0x5}]}]}, {0x0, [0x0, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000080)=""/8, 0x97, 0x8}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r4, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=""/73, 0x49}}, 0x10) recvmsg$can_raw(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x4) 16:24:47 executing program 3: socketpair(0x2, 0x6, 0x9400, &(0x7f00000002c0)) 16:24:47 executing program 0: socketpair(0x22, 0x3, 0x1f5, &(0x7f00000002c0)) 16:24:47 executing program 1: socketpair(0x2, 0x6, 0x9500, &(0x7f00000002c0)) 16:24:47 executing program 3: socketpair(0x2, 0x6, 0x9401, &(0x7f00000002c0)) 16:24:47 executing program 0: socketpair(0x22, 0x3, 0x1f6, &(0x7f00000002c0)) 16:24:47 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x30802, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1}, 0xc) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x41) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1}, 0x0) 16:24:47 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)={0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) accept(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x80) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f00000000c0)="9e8f09faf2a531bd87591cb9c5a6895a43453f68841bf1e4af63fc6ad2c3a7b276db2ebf5c075032ff2f13ed82e49215f80e35d930e328b33d0aa55eef8069b1f2195da6de47683e325b5a4967f4bbb81b5fcd49c5eedf9db33749190addb5f1a2f81f6240c9701510a5554157339bf98cddbab652c94ac5a32c802103e7ddda61", &(0x7f0000000180)=""/233, 0x4}, 0x20) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f00000003c0)={&(0x7f0000000340)=[r1, r1, r1], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x3}) 16:24:47 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 16:24:47 executing program 1: socketpair(0x2, 0x6, 0x9501, &(0x7f00000002c0)) 16:24:47 executing program 0: socketpair(0x22, 0x3, 0x1f7, &(0x7f00000002c0)) 16:24:47 executing program 3: socketpair(0x2, 0x6, 0x9500, &(0x7f00000002c0)) 16:24:47 executing program 1: socketpair(0x2, 0x6, 0x9600, &(0x7f00000002c0)) 16:24:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:47 executing program 0: socketpair(0x22, 0x3, 0x1f8, &(0x7f00000002c0)) 16:24:47 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x123000, 0x0) clock_gettime(0x4, &(0x7f0000000000)) 16:24:47 executing program 3: socketpair(0x2, 0x6, 0x9501, &(0x7f00000002c0)) 16:24:47 executing program 1: socketpair(0x2, 0x6, 0x9601, &(0x7f00000002c0)) 16:24:48 executing program 0: socketpair(0x22, 0x3, 0x1f9, &(0x7f00000002c0)) 16:24:48 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x6081) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x12151) 16:24:48 executing program 5: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x400002d0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={0x0}) r2 = io_uring_setup(0x633f, &(0x7f00000001c0)={0x0, 0x3330, 0x8, 0x1, 0x281}) syz_io_uring_setup(0x2b77, &(0x7f0000000240)={0x0, 0x5db2, 0x0, 0x1, 0x33e, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x90c40, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r0, 0x0, r1, 0x0, 0x0], 0x2, 0x5, 0x4}) 16:24:48 executing program 3: socketpair(0x2, 0x6, 0x9600, &(0x7f00000002c0)) 16:24:48 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000040)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/210, 0xd2}, {&(0x7f00000001c0)=""/55, 0x37}], 0x2}, 0x40000020) r3 = syz_open_dev$mouse(&(0x7f0000000280), 0x100000000, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', r4, 0x4, 0x9, 0x70, 0x4, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast1, 0x20, 0x7, 0x0, 0x200}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', r5, 0x4, 0x0, 0x4, 0x2, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x80, 0x40, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', r7, 0x4, 0x7, 0x6, 0x6f8, 0x4, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x10, 0x1, 0xfff}}) 16:24:48 executing program 1: socketpair(0x2, 0x6, 0x9700, &(0x7f00000002c0)) 16:24:48 executing program 0: socketpair(0x22, 0x3, 0x1fa, &(0x7f00000002c0)) 16:24:48 executing program 3: socketpair(0x2, 0x6, 0x9601, &(0x7f00000002c0)) 16:24:48 executing program 1: socketpair(0x2, 0x6, 0x9701, &(0x7f00000002c0)) 16:24:48 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)={0x0, 0x4, 0xa0c, 0x6, 0x81, 0x10001, 0x100, 0x1, 0x6, 0x1, 0x8, 0x3}) 16:24:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) 16:24:48 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x101000) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r1, 0x1) 16:24:48 executing program 0: socketpair(0x22, 0x3, 0x1fb, &(0x7f00000002c0)) 16:24:48 executing program 1: socketpair(0x2, 0x6, 0x9800, &(0x7f00000002c0)) 16:24:48 executing program 3: socketpair(0x2, 0x6, 0x9700, &(0x7f00000002c0)) 16:24:48 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) 16:24:48 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x12120) 16:24:48 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001280)={r0, r0}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000012c0)) fanotify_mark(0xffffffffffffffff, 0x44, 0x58000008, r0, &(0x7f0000000080)='./file0\x00') r2 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001240)={&(0x7f0000000100)="5011bd2bae260c22a34c5cc7d74b957c954b795afbfe6796d6366c010a20a53d7037bde9ee9937999fbd89444946a8c0e0500c934c03ab795a9e92e857065dd0b449c35d99666176a43ba9886a80863b2ea8e6da1ef2182a2c9d38756e498973ea5498a672c893315c8ac81ac0b8f4e03c9e4c3252e15ea8ca862c9b88611c8e5e66a95ced7a9c508c26fc7d07cc502c18c96442f3b004fd6512377c007e8c084edbd0bc0c6ebbf483c27e0802ada4eee316d83abb606009860e61e8ea9f809c376dbe387fe14d64533b55b5da9fdf0fae78f2169b91fd1c7b9266815f1ab7600e81539fbda78e7ceef06054954fb4435d80c14712665f9e338c858430d1ae3b6b8aa1fb992ef7ba1edd3ae8e9ca00b00e75bff255b512c6a07195aefc6a0089e650c610e53a2cadd03f621e9b13704c5a782686ee0c39440246a288a9a7b1426e95091c1741c1cce4ba2bda03a17837c9ef236a641b201bf3161698ea9d9c438830c5eb9210a833f6b54aeadd78522821d5a0eb099b50ee4db6164566e0adb1400a1b15c0b94f2ef59db57c1f15e434da61cfd3e1831ed8a15dc99a4276333810b25a59e10a803ffd844e9357a60bf16906ee38d928ddf6ed36820f66e07ba1dfeb90d8a10ee41c688e28b24cff489205f6187e3f5d75cfdb2f6fccf3820ef4ed6e16cd68042bb069c4c85384571d70a11545f2832319abe8b9d35c6f9962916bb08d99857d1af7b960b9511b225a40a7588acfa3ae1d7714a184aaf9e269a034032d7a61d5f2caf42040f81276804ae482f60f0a1303f87105651f2a75c01726fbe23d340336977ab52e3249c5eb7b943a336cbe96e42b14eeb89b5952bec949871bd190713ec46850deede38019328f028ac1e9faa77e6a63b7550a82b5c360dfbe8e854134f0abd6fb608b0fa18d014c9d67196c32aacd87860d837ce6987d9ebf693943f9c3144be5331bc8b162e1f78d784bf934acdc35fabddde01af54602ac60006d593981b65043c85bc0b8402c1de2b900b6afa3942ab013688da7f8af5305f9dbad02f5d8ac769943ae26be52b00a7e6d0291c2a040c8d1115f6c4b71d251613f179c6e66c2d609138745a843ea49f9e687a1061b48a3f19bbf91ad66900ab0f01371b36a565f49d9f11718261ac90b5ff26d5c5aa1a012cad68ecc3822b4b7988ff1e9d25afb6edfb91e98e842f5a394a1692400395e04f70156053636cc9ab55002084ed6a1655a03cc3e08797087a337de36fefedb58e40a0082551270fb16a777becc8152687bcf103b8765ad9bbe8537364e5fa4073d5110230b69b4a8db381764f96289aefcb3af88a00823845a5eedd92be3d0d1b80c3a93a7e21f89f42d2b62261fd73530093bcbe6eeb6fb515ba6f097fbb723750c01c25b42de9c092fac4c591149c5f89c6808c782358817b44e5fbe72efedcc7cbed818ab9115feacff151134976edd03c97339aaab793e3505d2f07628b684b56730381c8c57de03ef2f2ecd94a23a2ec488c5e4d06726bfefa0223649e158cddf852ff482cd360f5b3124ad26f8303b78a3112aa5d7d04477abbc2ec994d17024ce2582c872be8b5bcadd5154815f37a8ae9005d97bb82d65a48df8d084cffb37d06b83db46796d2bff76f61151d82fef8279651d83ff0f187d23ecacc72992f50b1ec49ab1d15600ec6581a96af2b8e54a5777284a8d064c051d94bcdc6cc5fc37a3729895c21fc73db719c651eaea9b3c1e69cc193072978e197c2a5aebf3691b8a7573f73041067debf887c6c5030d4e5fc25b4aceb4fd34d36695c5ab911a06c730bc7882dac99945f28eb89e2e5eb56690f68b4aab883410ce127889d249cb209aaa18d378b7bc22333e83773df5934e1bd68d0e8ea68459dee1fd30e12673dccbdeab1428b5c74d99cf8d8f7e8c31363973efd0c7d2fc72ed7f37589c87ea75628ce4ef6cb2dd6d9338dd1c161867b96e7baef95f9277128043f041f0e50e3f9ab6ca8e29e0cffaec42a976e6145dea348e3a38e7ca86a11708db2866fb27a52d1db613f1f8ebd71f5a8b80472ade4e14682e533b7a0025c486a06b49be1c802312dd9b8f0e9bdcbffa16df390305b114f93ccda155c53b9271ab5bea6cf14f8e65e3c1a83064106be4a529fb2ff0813810317d687855dd9000c417d52719b8146b3683e518f6965d1591795b19bb0febb516d76fb4f47c16c346c5d9c20598861aebb8750daf54e8034281c59e30b9d696fc747a684fb7da57b48f79ff50d52cb7dfbcbbdbff96a3a3d99998e9eef61154f6606388733a3c869c0a4e57a4dcc84e729ccfdde330095b5c3a210fc09421dcca1af53fa2539549bc928347508446c55ab1e98fc044a6237d1f0579abf30f02dd897dc9020644ce9b77556c43526d02c54a9319ee33c70f3917a00a0d524a05edfa8a9cb519a0b32cfba5165060168727baaf0558527a46e5d814f84e225a9eca0b00349b94ac43c91216096f888c5a72a9f9a1cbbb4ce44ada4a6de6576c1264f2da255450bd330e381f074db51be9e2887e54ded686faf27cfd1f7e91e05ff83cd0eb368b523982577692bd2da78078359eac6c0d4367ae306115e06f659f4b5d4f04262b7e42ef36ebe028a52dcec73d7bf854473fa01cb79dc75f1231768693baefae662b684f6bb49fb11fb28ad6d129fdcd66c8f525cb6804bd35d353981d2404eeb14381e52f84ed305b3f3aaf43d1b161d59219c1fa8717966b5ad3d4e8586de99f26a4545e45795576d2ba16063f44179cd5d25d190387a37dc65dd28d1c8f8bdbb2ff67d59e8a8070de2ff55aac680a48517ecf42130ccfbedbc581874d2618d9956a87d5bd2337e9d8242df3ebd02f88d756bab02674f4a317c79359737f42e2c4280cb1d672121474232556ebc5fd73ab48b45663fd56621e4a3c1e027e7aa25c26663c3a19a0a1a3befa884b6bc7f5856918bb5a7c43d226e44e1a8a64e8fe7fefc2999d53656ed44861f38eb4159210246beb65dc6260b65f4c2fb6d0d5e44703b8f1deb780737d67f96cacb0860b7bbde2aa846fae9cd5c96146861e7ae3290fbbfe8d6e9d434fbe0b0e2ad458d6b58503aacdb4a706f23bae2aab20693c2d46a93af9d8ecc2233a908fc457038c43003eed48347067cbc91b7a8eb37f542272dcac71a7636bcb38f9a26bffc094370f3a88e55f1fa24ca949ea994fbba0920e10538a6491158336776a160e6abffc138a8d4f691746ebb6aeaabdeed6745672cd0f1d6ac762a6dd11267262b209f2fd3facbbe4c55d19621db0f3a0df9e27d744596cb35d6de94505eb245ad1f4e841ff7b34893bfb406dc9fbbce70074394e7c2ec5ca05d02d998d47bb562034e3c9c90d0683aad281383b3b19e304d2c51f5c8af3b3927d4a99e7ca8494a75cdf3a80b6115c4860d276a4c958e23bd944fd14583c429d561d4dfe00f2f22cbe4ad8401c146ddd02e39a1c5b1251ffd718a4bcee8bf65ad4d5b9792a220067a8dc49fe470258ea1e39a9ce4a7f72bd2ff5926bf28cf95322f1a19a44775b194749483e44b02fdd37bf64561da659b003161c3ebe7515ba5edcfcec1b9cfb244eba5309986a20d0ece9581fcfd8ffad91635171cf07a5e0ea0102bceeefd48aac46b48cd096c0e78dbf786a2db6fd3e650959d3de373c54a38c0fbdca18fde9311cf71a58663c7139326acd53113c33675f7017bd9f6c7214206e61b4cbeb6fd7caf3fea2a3ba6e1c97c0f301c6fd39e45def7aa08019981ff5a78f27011657b01b7975c0874915b0c886b8e949fe3604834676bbcfb1feec1ecdfef03520d8c0435db86fd48014c43a6c688964daf1abad0d71dd7079dcb14b458eab0f28e40ffb839022cbed57113321e92ffaf8e4aeac943adcff82cc688533167afb067d39ecd73df0623b9629eb53e72063f13f43560546cbb24d732df6ca7281f2fe2f658919c70b731d1cac9a8b26983b06375294638e027057e3f32679e7e327dc8cf191a13eb904770cabb31c7c4ba16e28ad1e2260fe78fa2cb2c5b81bd52c7692757543e1b83d57dea04dd6f95719d49d7b402d4aa5bcf752f56faad5e3617cfb307ae9fe6726b6b25ecbcf181fa3a15fc54a97031b0d6a1c14f9a8e7666379072be29d9c36844577b182125782c8e0b57e8760d3e273e4b6fff6ce72dc441af21f4682c1ab440bac3f5ae8c8bad73694120fbf8b7e39da50415dc8b323e0850fd475771b77611a4b5dea8780a78e14fba92e580e83d55d6ba1aa1beb6dc3a255c3e82d4a4c3947e29fde2afc6e5d36dfc23600307932ff91b476ea53da128faf8a1b96215b398f5057c8122585d2f1d6470a45085202cdf1f16613b54998a3af149b93ab905b5b761c9df4c46656e50b8284fc93cbb35899fd4d4e61f4a6bab672f55d67102d5632eb161cd6c12edd7aa892b30157cef7b5bb9d39f196533e2258cf49c5b5c58ce33b4d8f79ade30f0d5f81ecb9050c07a1b46087bd08f42d4da679d6689adcf4f7dc8d64d59d63a1df1084b57bd472d8e903c040dc6f80b111d275a2b8391ee51ee96ac3218419788252905e406017b720cdadbb9d93a6470e5f060d622f38a7f7e70150c9792119696dc4f0179b91f93a400479ae81bee5c41723a41896cdeb0e33286205356bfaa6d80a5fe81afd3833016cdc1b328e36f7231fef6f05fa46c3cc20de73b8b5043b5d988c7491d415419b9c56be35adb601d1cb9b67d33f59df25134f42b0427c515ba9d66faa1227c4fb4fb36fbf6cd41ef759c1ecf50649818550356ec5e6e6fd0d773c28195ea18328b5899dc8c05e4303c159bf7574eaa44f47c4d22c9c8b90b7bb5d4b360da97f0ab53473a08a6f009f00c0a6bd7c18b254d1ddd25e771dda6cc8dad4e19508a6bd95a83a0214f6175453666eb82b517937daba97f6431e2d52ffc047753071da8d933fa7820115a8fd3b8ec56617ca16eb9cc6db4034060c58f60a296f9955bbf190e8b62df328454c0a60269ce108abbd535cfc766274644c77f6878b7b83ea05029b3f49505e1aec5bcb0a2d26aa778eea3497f268234906e2ab6da9df4a882094d302533dc5d8b0d4b304d6ac20732b221dfe4c49a9603029da1e3d31aafa8940ffbc065297403a88f422a9f1f5c7a2264c22cdf64c9654f88a3b1ef598fdf76fa40f8154967018a4999762a9aef84b3bdb0e6fba96a54e49caacc14366dc0b63fd0e6ad04b9f2b4a66eea79183c51dfe799bc98695f2859b948c59151616ffa232d179182d8fd0c92feb0237c7f3bdd96b6968e08e9eaa0855be3db0e10d1770cb51ea346676fc9bc5750d0114ac281d0ded8a910f742ae9f493d16db87e767359cecf6d82ac862f5fa405639031495565861acfd239ca0185359975cb0c6cfd30cb7c287446d9ee3030a570996d55c9231f58c2d2b0aa4a9b2c22e44778254987c73d3a76824f1445daa650d63289715d4d236da7329ca0ec4f96d0e76178a5d19fbd320ec084d44270eb2940de23ec46342801f9704a9a710f20e125f7337f427fb003ed6fb644688f3565b8651dd6e35cc58590f308a5192b6c78ea4a95a2f910bc26bb6871e9b19eeb1b228cf05aa5ae50e721a74802ba1100cf557f14d06e39089da48d4b46888a93a3969b673411f8b860163b070df24949a3baf0a94676342ac723916004c7ca3328553154db43f8ed75c41d315ae7fb83b6811e615d90ad77fa92ae74eb8fb210ea200d4f5445b746ec48ee746104403a0e0a4ec6f18f689a10e6278c31703e60eaef02e72794260f9b55c6459936a561164b", &(0x7f0000001100)=""/148, &(0x7f00000011c0)="6d6acfec38100243ecfb3214eb25c7fc4347cf79593db474fb0cc7c272288a404c", &(0x7f0000001200)="fdc788309f7ba4b4d4a1470131965a387b5bcdec6f1345e0be2b8f84861be5cb16a59e35cb59b3e1671734e7d34cf45261b2116f80edd9f9f1d93799", 0x7f, r0}, 0x38) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000014c0)=0x1, 0x4) 16:24:48 executing program 3: socketpair(0x2, 0x6, 0x9701, &(0x7f00000002c0)) 16:24:48 executing program 1: socketpair(0x2, 0x6, 0x9801, &(0x7f00000002c0)) 16:24:48 executing program 0: socketpair(0x22, 0x3, 0x1fc, &(0x7f00000002c0)) 16:24:48 executing program 2: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x40}, 0xa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2800000, 0x810, r1, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:48 executing program 3: socketpair(0x2, 0x6, 0x9800, &(0x7f00000002c0)) 16:24:48 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) 16:24:48 executing program 1: socketpair(0x2, 0x6, 0x9900, &(0x7f00000002c0)) 16:24:49 executing program 0: socketpair(0x22, 0x3, 0x1fd, &(0x7f00000002c0)) 16:24:49 executing program 3: socketpair(0x2, 0x6, 0x9801, &(0x7f00000002c0)) 16:24:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/58, 0x3a}], 0x3) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01064c2, &(0x7f0000001400)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01064c1, &(0x7f0000001440)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r4, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[r4, r4, r4, r4, 0x0, r4, r4, r4, 0x0, r4], 0xffffffffffffff4d, 0xa, 0x3, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000340)={r4, r4, r6, r5, 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r8, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r8, 0xc01064c1, &(0x7f00000013c0)={r4, 0x1}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f00000003c0)={{0x0, 0x9, 0x1ff, 0x6, 0x98cf, 0x851, 0x7ff, 0xffffff9a, 0x200, 0x7, 0xff, 0x80000001, 0x400000000000, 0x80, 0x8}}) 16:24:49 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_complete(0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3233, 0x0, 0x0, 0x0, 0x8000}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0xb, 0x6, 0x6, 0x100}]}, &(0x7f0000000180)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x8, 0x4, 0x8}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) syz_io_uring_setup(0x23ce, &(0x7f0000000040)={0x0, 0xb664, 0x10, 0x1, 0x37a, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_complete(r3) 16:24:49 executing program 1: socketpair(0x2, 0x6, 0x9901, &(0x7f00000002c0)) 16:24:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x0) 16:24:49 executing program 0: socketpair(0x22, 0x3, 0x1fe, &(0x7f00000002c0)) 16:24:49 executing program 3: socketpair(0x2, 0x6, 0x9900, &(0x7f00000002c0)) 16:24:49 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x29d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x400080, 0x20, 0x8}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:49 executing program 1: socketpair(0x2, 0x6, 0x9a00, &(0x7f00000002c0)) 16:24:49 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}}, 0x881) 16:24:49 executing program 0: socketpair(0x22, 0x3, 0x201, &(0x7f00000002c0)) 16:24:49 executing program 1: socketpair(0x2, 0x6, 0x9a01, &(0x7f00000002c0)) 16:24:49 executing program 3: socketpair(0x2, 0x6, 0x9901, &(0x7f00000002c0)) 16:24:49 executing program 0: socketpair(0x22, 0x3, 0x300, &(0x7f00000002c0)) 16:24:49 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4ce40, 0x0) 16:24:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:24:49 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x10, 0xffffffffffffffff, 0x8000000) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 16:24:49 executing program 3: socketpair(0x2, 0x6, 0x9a00, &(0x7f00000002c0)) 16:24:49 executing program 1: socketpair(0x2, 0x6, 0x9b00, &(0x7f00000002c0)) 16:24:49 executing program 0: socketpair(0x22, 0x3, 0x301, &(0x7f00000002c0)) 16:24:49 executing program 5: r0 = syz_io_uring_setup(0xe2b, &(0x7f0000000180)={0x0, 0x6fff, 0x4, 0x2000, 0x22a}, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000006d00)={{0x0, 0xc, 0x0, 0x5, 0x0, 0x1, 0x101, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x86842, 0x0) 16:24:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) 16:24:49 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000100)={&(0x7f0000000040)=""/189, 0xbd}}, 0x10) 16:24:49 executing program 3: socketpair(0x2, 0x6, 0x9a01, &(0x7f00000002c0)) 16:24:49 executing program 1: socketpair(0x2, 0x6, 0x9b01, &(0x7f00000002c0)) 16:24:49 executing program 0: socketpair(0x22, 0x3, 0x500, &(0x7f00000002c0)) 16:24:49 executing program 3: socketpair(0x2, 0x6, 0x9b00, &(0x7f00000002c0)) 16:24:50 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0x109, 0x7f}, 0x0, 0x0, 0x180000000, 0xb3e, 0x7fff, 0x7fffffff, 0x2, 0x3f, 0xe46, 0x8, 0x0, 0xffffffffffffffff}) 16:24:50 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) socket$can_raw(0x1d, 0x3, 0x1) 16:24:50 executing program 0: socketpair(0x22, 0x3, 0x501, &(0x7f00000002c0)) 16:24:50 executing program 1: socketpair(0x2, 0x6, 0x9c00, &(0x7f00000002c0)) 16:24:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x81, 0xfe4c7bf7, 0x4, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x40) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000480)) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r7, 0x8000000) r8 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r8, 0x8000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x9, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @map={0x18, 0x2, 0x1, 0x0, r7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x3b, &(0x7f00000002c0)=""/59, 0x41000, 0x8, '\x00', r2, 0x0, r8, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10, 0x0, 0x4}, 0x10}, 0x78) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)=[r1, r6]}, 0x2) 16:24:50 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xf0742, 0x0) 16:24:50 executing program 3: socketpair(0x2, 0x6, 0x9b01, &(0x7f00000002c0)) 16:24:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:50 executing program 0: socketpair(0x22, 0x3, 0x600, &(0x7f00000002c0)) 16:24:50 executing program 1: socketpair(0x2, 0x6, 0x9c01, &(0x7f00000002c0)) 16:24:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40012020) 16:24:50 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r1}) 16:24:50 executing program 3: socketpair(0x2, 0x6, 0x9c00, &(0x7f00000002c0)) 16:24:50 executing program 0: socketpair(0x22, 0x3, 0x601, &(0x7f00000002c0)) 16:24:50 executing program 1: socketpair(0x2, 0x6, 0x9d00, &(0x7f00000002c0)) 16:24:50 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x43) 16:24:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000) 16:24:50 executing program 0: socketpair(0x22, 0x3, 0x700, &(0x7f00000002c0)) 16:24:50 executing program 3: socketpair(0x2, 0x6, 0x9c01, &(0x7f00000002c0)) 16:24:50 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index, 0x7, 0x28, 0x8, 0x15, 0x1, {0x2}}, 0x7fffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1}) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000180)={r2, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000300)={r2, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000200)={r2, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000280)={r5, 0x1, r6}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x113803, 0x0) getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 16:24:50 executing program 1: socketpair(0x2, 0x6, 0x9d01, &(0x7f00000002c0)) 16:24:50 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000140)="9e58e010b98b67fb18003fe6c48243c245b5cdb637edeffd0022214758327d21373a36fdcc776ef29ad00486f523444fad2dfab1ccc3518ae3229e80e2f617c67073842c25cfdae2937682c1660f8e4ea0edcb64f9abdd2873ad8106bd5cea366e3afad1b4b228595c0d920cc33f8f6e644a2a8977cffe54f66558d9425349a71a3fdf23", &(0x7f0000000200)=""/144, 0x4}, 0x20) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) bind$can_raw(r1, &(0x7f0000001280), 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000100), 0x4) 16:24:50 executing program 2: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000102) 16:24:50 executing program 0: socketpair(0x22, 0x3, 0x701, &(0x7f00000002c0)) 16:24:50 executing program 3: socketpair(0x2, 0x6, 0x9d00, &(0x7f00000002c0)) 16:24:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000480), &(0x7f00000004c0)=@tcp6, 0x4}, 0x20) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100)="09d6ca9b14b446c3ecbe5cc94d4d30056a336f6ff4baacf6a2efbdb43fda1a4a431e361e9f56c76be907377525fc52448bbb0647241262acb2a1f4a30ab6267150322c5c3a627ec1b82c5d89b3eed4bc2584f58fee98fd4ffd1fb8a436604cdfe5b9ccad5849760f3e630b5903ee1f9d13d21c4b6c3b848edb5b00c90bfa367244ca2a88367689845809cb68e63f965179c10369b5d106b79550ca181e77cd2aa0ab319d8b22761fa04845dfe3751aa71770aafd5f1ead103773b8bb357b5ea2d1ff4d3397e16455a36ea4ba7c0ce83076caaefd0e64d184edfc6102c9993a261cd7", &(0x7f0000000200)=@tcp6=r0, 0x2}, 0xfffffffffffffefa) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/223, 0xdf}, 0x10000) 16:24:50 executing program 1: socketpair(0x2, 0x6, 0x9e00, &(0x7f00000002c0)) 16:24:50 executing program 4: socketpair(0x2, 0x6, 0x9c01, &(0x7f00000002c0)) 16:24:50 executing program 3: socketpair(0x2, 0x6, 0x9d01, &(0x7f00000002c0)) 16:24:50 executing program 0: socketpair(0x22, 0x3, 0x801, &(0x7f00000002c0)) 16:24:50 executing program 1: socketpair(0x2, 0x6, 0x9e01, &(0x7f00000002c0)) 16:24:50 executing program 0: socketpair(0x22, 0x3, 0x900, &(0x7f00000002c0)) 16:24:51 executing program 3: socketpair(0x2, 0x6, 0x9e00, &(0x7f00000002c0)) 16:24:51 executing program 4: socketpair(0x2, 0x6, 0x9c00, &(0x7f00000002c0)) 16:24:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfd}, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 16:24:51 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:24:51 executing program 3: socketpair(0x2, 0x6, 0x9e01, &(0x7f00000002c0)) 16:24:51 executing program 1: socketpair(0x2, 0x6, 0x9f00, &(0x7f00000002c0)) 16:24:51 executing program 0: socketpair(0x22, 0x3, 0x901, &(0x7f00000002c0)) 16:24:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:51 executing program 1: socketpair(0x2, 0x6, 0x9f01, &(0x7f00000002c0)) 16:24:51 executing program 3: socketpair(0x2, 0x6, 0x9f00, &(0x7f00000002c0)) 16:24:51 executing program 0: socketpair(0x22, 0x3, 0xa00, &(0x7f00000002c0)) 16:24:51 executing program 5: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x60a3, &(0x7f0000000100)={0x0, 0xcb03, 0x20, 0x3, 0x200}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4000, @fd_index=0x6, 0x407, 0x0, 0x0, 0x0, 0x0, {0x3, r2}}, 0x5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r3 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000000300)=""/61, 0x3d}], 0x2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x106, 0x1}}, 0x20) 16:24:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) io_uring_setup(0x7592, &(0x7f0000000080)={0x0, 0xd0e8, 0x4, 0x1, 0x3cb}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x6b0, 0x6, 0x1, {0x0, 0x0, r1}}, 0x6be) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:51 executing program 1: socketpair(0x2, 0x6, 0xa000, &(0x7f00000002c0)) 16:24:51 executing program 0: socketpair(0x22, 0x3, 0xa01, &(0x7f00000002c0)) 16:24:52 executing program 3: socketpair(0x2, 0x6, 0x9f01, &(0x7f00000002c0)) 16:24:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:52 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0xff, 0x800) 16:24:52 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10002) 16:24:52 executing program 1: socketpair(0x2, 0x6, 0xa001, &(0x7f00000002c0)) 16:24:52 executing program 0: socketpair(0x22, 0x3, 0xb00, &(0x7f00000002c0)) 16:24:52 executing program 3: socketpair(0x2, 0x6, 0xa000, &(0x7f00000002c0)) 16:24:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) 16:24:52 executing program 1: socketpair(0x2, 0x6, 0xa100, &(0x7f00000002c0)) 16:24:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x40000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000980)="9499c9568ed6050ca7204ef6a8eb2eea4994226b586978755f70bb3ad3579f94b829c6d59378a1c20b99c82e584a43c6f7b38f72a27153aed683a82bffc82398fa9551c32e72d93d57ca9883992f9c25bfec4112e4aa632584348a8a1661510364d47fe11ea2570a33a6b8c3b3fb2ff51b33d0a0b10e0137ead60dc9a8544a03b68a8d716af2be743734695d434836909035197d0a7d70f30ec39b3aaade703942295a3b839812347c6b1d6e80f0550e8a47c443ef92a0d347b816c2b0af247de158753d5ce4758dc7cdd9a249072c4b0f188daa75019c22a1bea81327e4bf913c195e8606ff0011666e6a459b9579883896735b6f5fc32808446d974a72a6635137bc3108a92a9f788ecb0cac07c4c512ab4025175b8853240e4e45d978d2efcb8cf275c47a703c829664b0688ee3a7c077ae01d29daffcc118f0018939682b4e1f561e74359637f7f9cd8178af9b0dc5a1448a9de80c363cbe79417421fcdcfcf91f7f8c8561ccde17a39d0c7c0f7ee13387eebd7654405e247709cb43853c2396b69323557d0056d017ac821e697f6c2d66bdbd97a9fc4fa25c44b69994123a0d0b8fa8862fb664b0ab104bcb6b80faac26ba69c220db86b14dbe080f6ecf8b1c1eb11c6becc83360eacba1274d37c9f3d6d5291b296615dc663fbda67f64f55d176cc2e6563945b794ee40b7298a2abede881c095a0ad9ad19fefcb1027a64ae00a73870e4b7cf9c3e9e9b9ea50d9935e488af4ad08f2b1fdc71f7a807500e82a511b761c6218f75ec09a97465ceeff5462f3c19e3c755252944f3fcd876d46d5f89c8c6645222ff9f90e74ad885c65a10afb509e18a1a159d268aca962fa68ff8d260a2f5b4568bb5212ca20c45711e6477e904fac03c9a5277f5ab10c8a7a7081b675e395fda2652d0530e0a7cf0b308580577035383fefb1775a5b66415bef1953096d400c7e725f57452be54ff7c20f0390cabb3eaee3ac1719dced054798d445dc0cd54813e7501b9380489025bbcd0bf1ea2d69f402a9320ec2a04c2566540c7e78f619a7e39aa87f3360f990edb22ea33d964fce0f23fccb0f06cb485f962212e3ed676f71b9aef51bf8cc229f1ef39d9432b70e65eee4dbf1c86650f73416c25d8985d05c2257823f416699c2d1a12538467e0378913ee6805a2e74e7c4d2f3d2a4a36bf6ac5da6c85110d47c9cee88bef6d979096ea028dad29bc828b1959e0a95a19e5214a2d4f90a8dbe7b40f2ee8f619c2a4d08e9afe91d8d1639428f25a407c56a14bbb06d953d03f56a8dbb8165bfa78ca27db0abb3a589b47d27d8e9baffb4d508074c710b37c065a488f7e3ccc10bf40289a17702fbb4d1ffbac759bd88acb8e8c473d811baf03dc674bbbb1002b78f94840453e752820b8eee0253c1ef9a7b7ecacb18a6c9732291423d770e4df03f6c3f0431c06711da49e84a81ae93e15a8f03e0a3831ea18da4062254109c588c3b524a95d214aa8e1da0e5a26a1768c5bb100169bf7e57a3be49c5d968bed74c3447fcbf888e9748009ef01698dca1f7526cacb17f33060c5d79856894804f850be6776dce7e9bf0def023ecc43be09d52e3189a89b465fa10b3b632a70d47af55719f3349f9e2b81f86c71f40a858fafae7902ffcd81ce1892d142d62196a280e63eb7de4f283e9ee071a21d697dfa185b0e25e24100b2abf688867025ca11ea770b3f5d40590bfe2da93274f0239b7462553c24b6a0d9b197e5b06f5b15251e0681f34e4ac3570cf7cfa9f411db51cbc99c4f4fbb65dc2911f4582990a1f8a2ce615267ef815523be44b9ac71acc729ec3743027106ed3e94d89054ced42d506a62dcd9098664a61e9d23f2968b04fdc56f5caee724a665b19a2cfdfc41b6b6eed2ec409fba3cdf7cac84edf7256bae6dcc73020821f850a3f322dbce89aa12b4f37bbc84a7b65a28f8c7945fbefc14eaadb83668aa12b1fc28db81f8b3a468c37bf1a52e0056d2e378603bc2cdda3c1bcf3de74b083a589c0bbff65ceabd19c29ce208a1b4cf4a65c10f6d2058550c46c0aa3cf05c6f076cc9fc918b000d90025e9cd30cfd833ec4506830ca3fb03335a55acf061b41c00e5c92288eb3c76b02fd54cefd87036eda893ff1ecb2b771d90c5a461f891a00e7b0e504ef89a578a7d35889a757acaea6a08f0825def27817967205e3f5dc9eb23d8086bc30edf0c304a872bdbf25e9ea097369df9963b997a8e4f7890d62ccf1d94e241d0f844c3d0aadd1d707dc9545d7d74af6a3f8a3639f5c59d8d1e35002531d69ccfa1c2f9eb1e97a7426c596d44c0d0c19e3329b51be2caca79d82f6bd4d3ad15ae782b138940ada80118bedbf574e7df7840e5668da16e98ba93c3b6f400eeb2837901ebce7c8c5d0c08943479d744dc07c5fe4e48eb4d6390279a7e3bc4b577218a91374bd9d9225b0695e09aa96405095d63cc28c0637196b9f8e79287ad8054434074c28dafa6d319d3a2c80509cae1d6276e505fc214fcca0953f1d5f61878e339daf90eba96e5e28fa7189ce4f82e9a10087cdb699895a02a3362c10b5d236c9698356f4b25feff40947e4b171a958a4504500295f129771bcce9b79cf7f05b7693b8af72ebbe1195a9b9bce5fff6eda4ee98c596937b330ee899e0068ebef46c705b5074bdb2ef4a295bc008e1593240867e1b35a8061645a6e65a0dbe147339cfe2d9835330c43a193e03fd05c5ee447209543f2fe27763d88eb554bbeae3bfd28551bb6a3c788b8e7f32d051194e5feeb30e9d0e6c9102c376a7842d66b8f13d85f4a387eef5da2a0aa51aa156e2d93c12cf3063c38616687e52c8ef3f5fd99b8b4323538703e8206d9633ca5df8050d78a0f2603a8893945ec77ad866c372512c80e9ed61f1705574e8a80badd9b795e5accdb06de6595c36e1b59509079a45f24a0c3960c98c7f39f5ddaf48269fe0fde25facea1af0266d90c3f2471c4a74d9ace26e716054c460e8c66813676917595d116b7d5e1010a81a0bde9a5e78122411601c0e361d68f18a62546de685e5d77bbeb41b7cca7e01543bdbf0383e70c0f54711aa64b4f64e2cf80754400ca44e225214295d8347be2045cdfe0ab2252ce661af9dabcbc145f364cefb7519e9c85aef38787188b0c045cfa002dc384b0d4aa5df6ac5fe578447792250807e0d2040cf2d500e61aefda7bab9298206528cb067417c72620bed5622413024b6674cf9dbdde75abadc315c58c7336fd3d379f4fe0e68decd1d7ba39382ae6501bb3c79e47a150c7fac2a2a6fd9963f10f36fbedf28b703d6f4059ae6cee26cd3c30655cba2f369b12f06d78621f298ab626e9d8932b6bdbdb83b676bb5d86e8aaad49bc1ef387ac4569a56f14f4b4d42621603f4074e0d0538bd8d023a68aa56f4fd8da9f5cc38798039fcd795c0f48ecb452291ada35c1148c9187ed156453c9e7366e67088b6219eaddb14e862dae3b553b10e0025cef74d0494103cbba2f94afac389ecd2ac9455b15c7223b367e5753a3d189227c2aad480c93728d24352a66642f2abf5a06ce4a192058d959a5060d6a3a40fe19a179fa2eabd80977df41fa6bbd059b8e05ae0c132120d24eff74bb8f854184672e93a0f11bd7205935e96d216f35a9f7b9233c50fd0fa3b9fa297bfe001c37fef267a5134dbc6bc6f7b23c2a02292becd6c4546ce8a261ecc085f0629a952a6db8a1eb53aa1d41a0796140350fdc3bb5a521c7fa64fd2795abfb72bbe8923d0a8d0394f42529f1902e3281ee3c451eda7594c1a73120b3202f0594ef9c71acf48a7a37617ac2fcc60e57cad94cf8bc8a3827ee99d1ab5fda0ba064b65c557d0ed7a82777433385fcbe24d12652c8b6e45efaf570062ba8b23c51d5c5adf8822f01585d023b0e00a394dcce0f8e1241ef240ac38bc95275110c423abad54ad00aa96ab0199a959cda24e9e8328c7dd5d74e1d5bff8b8bb9b49932106186b7e0574a1a0e425f10d724ec9cf96a820dc99df23a97fdeb1c04e4dde6bd177f66e209dc3267b3e32318ab99cc2e88f0d51d1e18e14221bedf548b2b1f7e439e19f1510d959ab791fba5ad5234548d1f780ad61a7cb7b1e01e543fddb1008f16f66927877ddb01328ee377b05fc2100389e205044fa63af1bf8ce2a0642e6ee0c8b65b4ab5ee70132047815c5f6af0a9cba747067ae7afc399eb867c3440a36d78649765bbde65542e324784b9ea21d450dd2953414e978b38e75a23e0851166c7a88737e9d2c693adb54e218b2ab06409bb09c805f82b7b971e4890482ef82969470203b09b4a79dfb6c9dbf478a921ddd533249448626820c24a167925f9128fdac54b1e669d025646e84849de48ff54e2a99ca530d5649b47567c4040cbf3a489f34a3b472b7079403a0e434aed423ec1e9d7274c880bbc7cbeb1a63768c8efefbf971310edf9c85734cd268b3c483aa7f60019a8bbd7644aa4210dc3d9cfa4df3869bb6dd28801778a284ad270c5bfee234bc3ced911d648dea02c5dc22c3b88d56ca962f3f65c858395dc8f30970bb48d1f9e22d712740c07064cc20485d43960e9f2ce92cd053964e7bd6a507fa82e09b92db543627bc3dd42f675d3b3125a6a2de73574c17dc9168ca4cec15685a21e1bf99004e747cde453b67ac62111fe4683006672ed775d2c9f5b227bf0e5f37f29f2496df5d8b9c26a3faad5ff9febaddc4c0c8c95ee1d816fe7a078c2c97338bf408f6dc8ab0982391e0e8b408183e402faa76be4643fdb324b4fcedd3593adfd0dc6117de68a4d7d49fe203713496b548840e71da897a0a89ad9c4e69ec63ddcf3129c79b27df166dd8711f42892f2100e5b08ccaf8836411b7846e69842d27301b959ee8de55570e66251d6a8c8ca56b376b1fc2982e1aaceb54e98495aa1b6aecb21d34ae8b1a313202d49885dc122ba55b3d2b7215e3b5adae27d90aa54dda0a4aeb022441615e84d8046e8d0b587952fe8d146f2743c0406795d96175fb9d32126334e60697aba12ae890de1ecd30a69a3252ec82a44bea62492c95805c16baf2a0bd8feda60e0fe8ff3547d593b08579d9b271f3e7b54607e25dcc83fee2be397c57d484061f4f8073f6a50ab229206231b7efa2b0d63ce7395fc8b4ce9fa26230302accf24614379372537975e99583ff134af6641f6f220fd0d476dff9ceaa907e0f3ad1acd94ec53c163115c439115f3bf9ac63a44258765d6d22e9841e4bfa41405057781e66ceb708b8c0dbb2c29d22fc7f499bbd4a48f9791a0f1a23b826e78e83488e2377d3d8708f1b4c79cc4ea2b7eb6d72e4f6968f17f5ddbcb762d171d5c426cff33a9875dc9140f4a722cb028ad6d61e8581340340b1b78556e40bf1a2493a19ac733b5e56b83091cc71883b9d1f5460aeba9ba3e9a018af5e17b183135cf7607c22cf8cc2a41f88ffd7d30453de697cb307d38225e3687f14bba185f056234f12714908047f526249fa5158e93d5e42fb54f8ce1886ca4b297ed6be9634ee1882af08494420e4c506c149b612e4c2a47dc345f2ba5618aa7064d18aaf619a6ebcbf2bfe9ba23b90b29809824616294ba4656b5c7f92352ebb15ac0fc42d4e448d06609e9bad42940acc824e3ef3850c650c4a17f1e899ad4cca9105d7c453d98db0cb8d802e5293289592b051890cf61a61e1b03c5e5e5c7631676671ce5935f404392fae4906c36d443dda0539e5ee4451a41c92f3d15c8a360ba957d1e54c3392fbb09ff61ceef066a6a41fbcf6256e85f7d0f862232d43d9b636c6a7508673734321800bc", &(0x7f0000000180)=@tcp=r2, 0x1}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)={0x3, 0x1, 0x4, 0x20, 0x52bd, {r3, r4/1000+10000}, {0x1, 0x0, 0xfc, 0x3, 0xa3, 0x1, "b62c5172"}, 0x100, 0x3, @userptr=0x5, 0x0, 0x0, r1}) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[r5], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) accept(r6, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) 16:24:52 executing program 0: socketpair(0x22, 0x3, 0xb01, &(0x7f00000002c0)) 16:24:52 executing program 3: socketpair(0x2, 0x6, 0xa001, &(0x7f00000002c0)) 16:24:52 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)={0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x700, 0x5, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000480)={{0x0, 0x935, 0x200, 0x2515, 0x4, 0x4, 0xfffffffffffffffc, 0x200, 0x55, 0xffffffff, 0x8e, 0x0, 0xffc0, 0x6, 0x100000000}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x322, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000440)={&(0x7f0000000100)=[0x0, r2, r4, 0x0, r5, 0x0], &(0x7f00000003c0)=[0x0, 0x0, r6, r7, 0x0, r8, 0x0, 0x0, r9, 0x0], 0x1, 0x6, 0x4}) 16:24:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) 16:24:52 executing program 1: socketpair(0x2, 0x6, 0xa101, &(0x7f00000002c0)) 16:24:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x10, r1, 0x8000000) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000140)="6c305399df23b748f2476ba26718fe4e98588ce9bdf384638da0c16795e3b8311e73d09e800536f09af1e8335b196b7acd72eddc26f130032a42220f4039aec8ecc4e2bdaecdb25e8119198f6f9820d4f879e651654ad7d184e20e704382c81c82be1f6c01dfd9fc47af45069f93992fa10f52acd6a6b2611b5f68220c3c119082710a4753155f553ef4355d00000000", &(0x7f0000000080)=@udp6=r0, 0x2}, 0x20) 16:24:52 executing program 0: socketpair(0x22, 0x3, 0xc00, &(0x7f00000002c0)) 16:24:52 executing program 3: socketpair(0x2, 0x6, 0xa100, &(0x7f00000002c0)) 16:24:52 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x84001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f00000000c0)={r1, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000140)={r1, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r1, r3, r1], &(0x7f0000000140), 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x6}) 16:24:52 executing program 1: socketpair(0x2, 0x6, 0xa200, &(0x7f00000002c0)) 16:24:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:52 executing program 3: socketpair(0x2, 0x6, 0xa101, &(0x7f00000002c0)) 16:24:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x8000000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x0, {0x0, r2}}, 0x4) 16:24:52 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x31, 0x4, 0x4, 0x40, 0x0, {0x0, 0xea60}, {0x3, 0x0, 0xff, 0x1, 0x44, 0x3, "f222a5e3"}, 0x2b44, 0x4, @planes=&(0x7f00000000c0)={0x400, 0x4, @fd, 0x7}, 0x1ff, 0x0, r0}) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)=0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:52 executing program 0: socketpair(0x22, 0x3, 0xc01, &(0x7f00000002c0)) 16:24:52 executing program 1: socketpair(0x2, 0x6, 0xa201, &(0x7f00000002c0)) 16:24:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:52 executing program 3: socketpair(0x2, 0x6, 0xa200, &(0x7f00000002c0)) 16:24:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x2f, 0xff, 0x0, 0x0, 0x38, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x700, 0x8, 0x5, 0x102}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', r2, 0x2f, 0x7f, 0x8, 0x5, 0x1b, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x7800, 0x7800, 0x3, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x0, 0xff, 0x4, 0x2, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8, 0x1, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000980)={{0x0, 0x1ff, 0x8, 0x9, 0x27, 0x0, 0x7, 0x3, 0xff, 0x400, 0x8b5, 0x8001, 0x3d, 0xfffffffffffffff9, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001980)={{r4, 0x4, 0xad, 0xffff, 0x2, 0x1, 0x8, 0x3, 0x2, 0x80000001, 0x4, 0x9, 0x7f, 0x85ee, 0xfffffffffffffff7}}) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:52 executing program 0: socketpair(0x22, 0x3, 0xd00, &(0x7f00000002c0)) 16:24:53 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 16:24:53 executing program 1: socketpair(0x2, 0x6, 0xa300, &(0x7f00000002c0)) 16:24:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:53 executing program 3: socketpair(0x2, 0x6, 0xa201, &(0x7f00000002c0)) 16:24:53 executing program 0: socketpair(0x22, 0x3, 0xd01, &(0x7f00000002c0)) 16:24:53 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40011041) 16:24:53 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x4, {0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, r0}}, 0x38) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r0, 0x3}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000001500)={0x4, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x9, 0x0, "5376e969ac6498495d262fbf4b6fc9ea40a7bda65564232ecaa03eeafe3f1e915bc923b0d8c418e948fba5485758e9efefe3a87cfcad9b1830754a06fbc9741f3753f625f899e6910cc249d0698004188d09f791b47bb7113a848073353c3017bb2afda912b7fa8e3013b2f742951b32fb53fb36ac97af640853f7e1653383777af011d2cbd982a3d1c9b5ca2f8180ba214b9a05bdedf851f13202bacd1fde787ca9b11160b02120343bb34c3bec05d2a99b832e9652b535e384c849b523836136946dc3bc0080583c24939d61108da6ea1766df341cc3c1abad83b62c2469cf4851e096ebfdbcaef2f2f0922bff3ad934094a1a2230f73885683d322a040096", 0x3, 0x4, 0x6, 0x1, 0xa1, 0x6, 0xa2}, r2}}, 0x120) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:53 executing program 1: socketpair(0x2, 0x6, 0xa301, &(0x7f00000002c0)) 16:24:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:53 executing program 3: socketpair(0x2, 0x6, 0xa300, &(0x7f00000002c0)) 16:24:53 executing program 0: socketpair(0x22, 0x3, 0xe00, &(0x7f00000002c0)) 16:24:53 executing program 1: socketpair(0x2, 0x6, 0xa400, &(0x7f00000002c0)) 16:24:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10000) 16:24:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:53 executing program 3: socketpair(0x2, 0x6, 0xa301, &(0x7f00000002c0)) 16:24:53 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001980)=[{&(0x7f00000003c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/189, 0xbd}, {&(0x7f00000006c0)=""/255, 0xff}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/106, 0x6a}, {&(0x7f0000001840)=""/90, 0x5a}, {&(0x7f00000018c0)=""/183, 0xb7}], 0x9) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, r2], 0xb7, 0x2, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) accept$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01064c2, &(0x7f0000000140)={r2, 0x1, r1}) r4 = syz_io_uring_setup(0x3486, &(0x7f00000002c0)={0x0, 0x57f3, 0x0, 0x2, 0x138, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r4, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[r3, r5, r2], 0x3}) 16:24:53 executing program 0: socketpair(0x22, 0x3, 0xe01, &(0x7f00000002c0)) 16:24:53 executing program 1: socketpair(0x2, 0x6, 0xa401, &(0x7f00000002c0)) 16:24:53 executing program 3: socketpair(0x2, 0x6, 0xa400, &(0x7f00000002c0)) 16:24:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:53 executing program 0: socketpair(0x22, 0x3, 0xf00, &(0x7f00000002c0)) 16:24:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r4 = socket$inet(0x2, 0x4, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x408800, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000001c0), 0x1, 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000200)=[r0, r3, r4, r5, r0, r6, r7, r0], 0x8) r8 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r8, 0x8000000) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000300)={0x0, 0x8, 0x6d000, 0x40, 0x4461, 0xfffffffa, 0x2, 0x7, 0x7, 0x640a, 0x5, 0x40}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r9, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x1, {0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xcf}, r1}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x3, {0xa, 0x4e21, 0x4055, @local, 0x7}, r1}}, 0x38) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:53 executing program 1: socketpair(0x2, 0x6, 0xa500, &(0x7f00000002c0)) 16:24:53 executing program 3: socketpair(0x2, 0x6, 0xa401, &(0x7f00000002c0)) 16:24:54 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2023) 16:24:54 executing program 0: socketpair(0x22, 0x3, 0xf01, &(0x7f00000002c0)) 16:24:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:54 executing program 3: socketpair(0x2, 0x6, 0xa500, &(0x7f00000002c0)) 16:24:54 executing program 1: socketpair(0x2, 0x6, 0xa501, &(0x7f00000002c0)) 16:24:54 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={&(0x7f0000000080)="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", &(0x7f0000001080)=""/244, &(0x7f0000001180)="cb3edad31663419d0a1d1fd990f7d12da8bff97f6d7ceb37b6584c2e22fff940acaebaee69d0638d5fdecefe56e01bd7e9395a42ed05c8967cdf63afbfeabdaa7edeaa0fbbad885b47b2300e33e7d39280deaf6fd7088e83ead3038024fbab9b1d8dd46268a35213a03b5c794b07795c70d2a97ab2eff7a161b826a4f4ad373dd2bf5b65184c55b26e0f82b1d68961", &(0x7f0000001240)="8576faa75adef6727bfd396c548e5432490d8f4f68226edf32d02bf18b6240855a4874809aa6f65210f5bc4f4f28c76dc083b99f4ff5edf4e031e5369893e7ddd3e4c6c1b1defd2f0aa6593f2821d59eeb53fdfa21fb07286a15e70b252e93aa33276444f8782dc8f5402ef5c31fdff16b6c9a1608f3e0c3a141dfc52d3bea5f2f3df02f675edf8e68213f07f7458b356d4f158e", 0xfffffffe, r0, 0x4}, 0x38) 16:24:54 executing program 3: socketpair(0x2, 0x6, 0xa501, &(0x7f00000002c0)) 16:24:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:54 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x583283, 0x0) 16:24:54 executing program 1: socketpair(0x2, 0x6, 0xa600, &(0x7f00000002c0)) 16:24:54 executing program 0: socketpair(0x22, 0x3, 0x1001, &(0x7f00000002c0)) 16:24:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f58, 0x9359, 0x1, &(0x7f0000000000)={[0x3]}, 0x8) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000640)={0x3, 0x0, &(0x7f0000000600)=[r2, r0, r0, r3]}, 0x4) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000080), 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/252, 0xfc}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/201, 0xc9}], 0x7}, 0x40000041) 16:24:54 executing program 1: socketpair(0x2, 0x6, 0xa601, &(0x7f00000002c0)) 16:24:54 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000006b00)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000001500)={0x4, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x5, 0xd92, "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", 0x80, 0x0, 0x5, 0x20, 0x9b, 0xe6, 0x4, 0x1}, r2}}, 0x120) 16:24:54 executing program 3: socketpair(0x2, 0x6, 0xa600, &(0x7f00000002c0)) 16:24:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:54 executing program 0: socketpair(0x22, 0x3, 0x1100, &(0x7f00000002c0)) 16:24:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast2, 0x0, 0x80, 0x5, 0x2}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"4f74961110e6ef9755720cc36fc7a5a6", 0x0, 0x0, {0x2, 0x1}, {0x7, 0x5}, 0x5ff, [0x8, 0xe2, 0x4, 0x6, 0x8, 0x1, 0x3937800, 0x1, 0x400000000000000, 0x3, 0x8001, 0x1, 0x4, 0x400, 0x8, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"8774025eabded952cf0ca2b3452906ae", 0x0, r2, {0x8}, {0x10000, 0x80}, 0x401, [0x7, 0x9, 0x20, 0x7b, 0x2b4e, 0x81, 0x67b81ad8, 0x100000001, 0xff, 0x8, 0x3, 0x2b61, 0x4, 0x8, 0x3ff, 0x1]}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:54 executing program 1: socketpair(0x2, 0x6, 0xa700, &(0x7f00000002c0)) 16:24:54 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:54 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x10000000) 16:24:54 executing program 3: socketpair(0x2, 0x6, 0xa601, &(0x7f00000002c0)) 16:24:54 executing program 0: socketpair(0x22, 0x3, 0x1101, &(0x7f00000002c0)) 16:24:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x2f, 0xff, 0x0, 0x0, 0x38, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x700, 0x8, 0x5, 0x102}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', r2, 0x2f, 0x7f, 0x8, 0x5, 0x1b, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x7800, 0x7800, 0x3, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x0, 0xff, 0x4, 0x2, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8, 0x1, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000980)={{0x0, 0x1ff, 0x8, 0x9, 0x27, 0x0, 0x7, 0x3, 0xff, 0x400, 0x8b5, 0x8001, 0x3d, 0xfffffffffffffff9, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001980)={{r4, 0x4, 0xad, 0xffff, 0x2, 0x1, 0x8, 0x3, 0x2, 0x80000001, 0x4, 0x9, 0x7f, 0x85ee, 0xfffffffffffffff7}}) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:55 executing program 3: socketpair(0x2, 0x6, 0xa700, &(0x7f00000002c0)) 16:24:55 executing program 1: socketpair(0x2, 0x6, 0xa701, &(0x7f00000002c0)) 16:24:55 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x7f5ac2, 0x0) r0 = syz_io_uring_setup(0x2a0f, &(0x7f0000000040)={0x0, 0x9412, 0x10, 0x3, 0x38b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 16:24:55 executing program 0: socketpair(0x22, 0x3, 0x1200, &(0x7f00000002c0)) 16:24:55 executing program 2: socketpair(0x22, 0x3, 0xd00, &(0x7f00000002c0)) 16:24:55 executing program 1: socketpair(0x2, 0x6, 0xa800, &(0x7f00000002c0)) 16:24:55 executing program 3: socketpair(0x2, 0x6, 0xa701, &(0x7f00000002c0)) 16:24:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:55 executing program 0: socketpair(0x22, 0x3, 0x1201, &(0x7f00000002c0)) 16:24:55 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x26d02, 0x0) 16:24:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x8000000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64, 0x0, {0x0, r2}}, 0x4) 16:24:55 executing program 1: socketpair(0x2, 0x6, 0xa801, &(0x7f00000002c0)) 16:24:55 executing program 3: socketpair(0x2, 0x6, 0xa800, &(0x7f00000002c0)) 16:24:55 executing program 0: socketpair(0x22, 0x3, 0x1300, &(0x7f00000002c0)) 16:24:55 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44a082, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000100)={{0x0, 0x7fff, 0x200, 0x1ff, 0x2, 0x100, 0x9, 0x80, 0x2, 0x2000, 0x8, 0x10000000, 0xc1, 0x9, 0x7ff}}) 16:24:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x40000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000980)="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", &(0x7f0000000180)=@tcp=r2, 0x1}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)={0x3, 0x1, 0x4, 0x20, 0x52bd, {r3, r4/1000+10000}, {0x1, 0x0, 0xfc, 0x3, 0xa3, 0x1, "b62c5172"}, 0x100, 0x3, @userptr=0x5, 0x0, 0x0, r1}) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[r5], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) accept(r6, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) 16:24:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:55 executing program 1: socketpair(0x2, 0x6, 0xa900, &(0x7f00000002c0)) 16:24:55 executing program 3: socketpair(0x2, 0x6, 0xa801, &(0x7f00000002c0)) 16:24:55 executing program 0: socketpair(0x22, 0x3, 0x1301, &(0x7f00000002c0)) 16:24:55 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:55 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44a082, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000100)={{0x0, 0x7fff, 0x200, 0x1ff, 0x2, 0x100, 0x9, 0x80, 0x2, 0x2000, 0x8, 0x10000000, 0xc1, 0x9, 0x7ff}}) 16:24:55 executing program 3: socketpair(0x2, 0x6, 0xa900, &(0x7f00000002c0)) 16:24:55 executing program 1: socketpair(0x2, 0x6, 0xa901, &(0x7f00000002c0)) 16:24:55 executing program 0: socketpair(0x22, 0x3, 0x1400, &(0x7f00000002c0)) 16:24:55 executing program 3: socketpair(0x2, 0x6, 0xa901, &(0x7f00000002c0)) 16:24:55 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:55 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)={r2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r2, r2, r2, r2, r2, r3, r2], 0x7}) socketpair(0x21, 0x0, 0x10002, &(0x7f0000000140)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0xe8042, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r4, 0xc01064c2, &(0x7f00000001c0)={r2, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={0x0, r6, 0x0, 0x0, 0x2}) 16:24:56 executing program 0: socketpair(0x22, 0x3, 0x1401, &(0x7f00000002c0)) 16:24:56 executing program 1: socketpair(0x2, 0x6, 0xaa00, &(0x7f00000002c0)) 16:24:56 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44a082, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000100)={{0x0, 0x7fff, 0x200, 0x1ff, 0x2, 0x100, 0x9, 0x80, 0x2, 0x2000, 0x8, 0x10000000, 0xc1, 0x9, 0x7ff}}) 16:24:56 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 16:24:56 executing program 3: socketpair(0x2, 0x6, 0xaa00, &(0x7f00000002c0)) 16:24:56 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x87580, 0x0) 16:24:56 executing program 0: socketpair(0x22, 0x3, 0x1500, &(0x7f00000002c0)) 16:24:56 executing program 1: socketpair(0x2, 0x6, 0xaa01, &(0x7f00000002c0)) 16:24:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 16:24:56 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44a082, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000100)={{0x0, 0x7fff, 0x200, 0x1ff, 0x2, 0x100, 0x9, 0x80, 0x2, 0x2000, 0x8, 0x10000000, 0xc1, 0x9, 0x7ff}}) 16:24:56 executing program 3: socketpair(0x2, 0x6, 0xaa01, &(0x7f00000002c0)) 16:24:56 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x406400, 0x0) 16:24:56 executing program 0: socketpair(0x22, 0x3, 0x1501, &(0x7f00000002c0)) 16:24:56 executing program 1: socketpair(0x2, 0x6, 0xab00, &(0x7f00000002c0)) 16:24:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 16:24:56 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44a082, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) 16:24:56 executing program 3: socketpair(0x2, 0x6, 0xab00, &(0x7f00000002c0)) 16:24:56 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501400, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, r3, r4], &(0x7f00000002c0)=[0x0, r5, 0x0, 0x0], 0x3}) r6 = syz_io_uring_complete(0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r6, &(0x7f0000000080)="4d277bd79e88d7b52193b28d6a6e0bd978fe4c7128a8e0c4e2105e8d935216eb7511bf92a4772b93c3352e6f399bd6bd184b606a0b45854e088c3460e81def7a347614031507d67a463adaba72f9391ce84d8066b39cba4b6ed38b9d028348711fcfa0f4459ea3a9c996a238d0796fd538df49a354d582596649e68981afede7f271859eb5bf26d32d923089a3f1161dbb1122d7400a63dfdbd465df70b1bd319c32eda72c7e942d8349c316b0cdd41865be5c97493c853a7bcf4b", &(0x7f0000000140)=""/43, 0x4}, 0x20) 16:24:56 executing program 0: socketpair(0x22, 0x3, 0x1600, &(0x7f00000002c0)) 16:24:56 executing program 1: socketpair(0x2, 0x6, 0xab01, &(0x7f00000002c0)) 16:24:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 16:24:56 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x1, 0x14000000, 0x51, @remote, @local, 0x8, 0x8, 0x9, 0x81}}) r0 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x26a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000006d00)={{0x0, 0xc, 0x0, 0x5, 0x0, 0x1, 0x101, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r1, 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:24:56 executing program 3: socketpair(0x2, 0x6, 0xab01, &(0x7f00000002c0)) 16:24:56 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) 16:24:56 executing program 0: socketpair(0x22, 0x3, 0x1601, &(0x7f00000002c0)) 16:24:56 executing program 1: socketpair(0x2, 0x6, 0xac00, &(0x7f00000002c0)) 16:24:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 16:24:56 executing program 3: socketpair(0x2, 0x6, 0xac00, &(0x7f00000002c0)) 16:24:56 executing program 0: socketpair(0x22, 0x3, 0x1700, &(0x7f00000002c0)) 16:24:56 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) 16:24:56 executing program 1: socketpair(0x2, 0x6, 0xac01, &(0x7f00000002c0)) 16:24:57 executing program 3: socketpair(0x2, 0x6, 0xac01, &(0x7f00000002c0)) 16:24:57 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x16501, 0x0) 16:24:57 executing program 0: socketpair(0x22, 0x3, 0x1701, &(0x7f00000002c0)) 16:24:57 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) 16:24:57 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) 16:24:57 executing program 1: socketpair(0x2, 0x6, 0xad00, &(0x7f00000002c0)) 16:24:57 executing program 3: socketpair(0x2, 0x6, 0xad00, &(0x7f00000002c0)) 16:24:57 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) 16:24:57 executing program 0: socketpair(0x22, 0x3, 0x1800, &(0x7f00000002c0)) 16:24:57 executing program 2: openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) 16:24:57 executing program 1: socketpair(0x2, 0x6, 0xad01, &(0x7f00000002c0)) 16:24:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x40000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000980)="9499c9568ed6050ca7204ef6a8eb2eea4994226b586978755f70bb3ad3579f94b829c6d59378a1c20b99c82e584a43c6f7b38f72a27153aed683a82bffc82398fa9551c32e72d93d57ca9883992f9c25bfec4112e4aa632584348a8a1661510364d47fe11ea2570a33a6b8c3b3fb2ff51b33d0a0b10e0137ead60dc9a8544a03b68a8d716af2be743734695d434836909035197d0a7d70f30ec39b3aaade703942295a3b839812347c6b1d6e80f0550e8a47c443ef92a0d347b816c2b0af247de158753d5ce4758dc7cdd9a249072c4b0f188daa75019c22a1bea81327e4bf913c195e8606ff0011666e6a459b9579883896735b6f5fc32808446d974a72a6635137bc3108a92a9f788ecb0cac07c4c512ab4025175b8853240e4e45d978d2efcb8cf275c47a703c829664b0688ee3a7c077ae01d29daffcc118f0018939682b4e1f561e74359637f7f9cd8178af9b0dc5a1448a9de80c363cbe79417421fcdcfcf91f7f8c8561ccde17a39d0c7c0f7ee13387eebd7654405e247709cb43853c2396b69323557d0056d017ac821e697f6c2d66bdbd97a9fc4fa25c44b69994123a0d0b8fa8862fb664b0ab104bcb6b80faac26ba69c220db86b14dbe080f6ecf8b1c1eb11c6becc83360eacba1274d37c9f3d6d5291b296615dc663fbda67f64f55d176cc2e6563945b794ee40b7298a2abede881c095a0ad9ad19fefcb1027a64ae00a73870e4b7cf9c3e9e9b9ea50d9935e488af4ad08f2b1fdc71f7a807500e82a511b761c6218f75ec09a97465ceeff5462f3c19e3c755252944f3fcd876d46d5f89c8c6645222ff9f90e74ad885c65a10afb509e18a1a159d268aca962fa68ff8d260a2f5b4568bb5212ca20c45711e6477e904fac03c9a5277f5ab10c8a7a7081b675e395fda2652d0530e0a7cf0b308580577035383fefb1775a5b66415bef1953096d400c7e725f57452be54ff7c20f0390cabb3eaee3ac1719dced054798d445dc0cd54813e7501b9380489025bbcd0bf1ea2d69f402a9320ec2a04c2566540c7e78f619a7e39aa87f3360f990edb22ea33d964fce0f23fccb0f06cb485f962212e3ed676f71b9aef51bf8cc229f1ef39d9432b70e65eee4dbf1c86650f73416c25d8985d05c2257823f416699c2d1a12538467e0378913ee6805a2e74e7c4d2f3d2a4a36bf6ac5da6c85110d47c9cee88bef6d979096ea028dad29bc828b1959e0a95a19e5214a2d4f90a8dbe7b40f2ee8f619c2a4d08e9afe91d8d1639428f25a407c56a14bbb06d953d03f56a8dbb8165bfa78ca27db0abb3a589b47d27d8e9baffb4d508074c710b37c065a488f7e3ccc10bf40289a17702fbb4d1ffbac759bd88acb8e8c473d811baf03dc674bbbb1002b78f94840453e752820b8eee0253c1ef9a7b7ecacb18a6c9732291423d770e4df03f6c3f0431c06711da49e84a81ae93e15a8f03e0a3831ea18da4062254109c588c3b524a95d214aa8e1da0e5a26a1768c5bb100169bf7e57a3be49c5d968bed74c3447fcbf888e9748009ef01698dca1f7526cacb17f33060c5d79856894804f850be6776dce7e9bf0def023ecc43be09d52e3189a89b465fa10b3b632a70d47af55719f3349f9e2b81f86c71f40a858fafae7902ffcd81ce1892d142d62196a280e63eb7de4f283e9ee071a21d697dfa185b0e25e24100b2abf688867025ca11ea770b3f5d40590bfe2da93274f0239b7462553c24b6a0d9b197e5b06f5b15251e0681f34e4ac3570cf7cfa9f411db51cbc99c4f4fbb65dc2911f4582990a1f8a2ce615267ef815523be44b9ac71acc729ec3743027106ed3e94d89054ced42d506a62dcd9098664a61e9d23f2968b04fdc56f5caee724a665b19a2cfdfc41b6b6eed2ec409fba3cdf7cac84edf7256bae6dcc73020821f850a3f322dbce89aa12b4f37bbc84a7b65a28f8c7945fbefc14eaadb83668aa12b1fc28db81f8b3a468c37bf1a52e0056d2e378603bc2cdda3c1bcf3de74b083a589c0bbff65ceabd19c29ce208a1b4cf4a65c10f6d2058550c46c0aa3cf05c6f076cc9fc918b000d90025e9cd30cfd833ec4506830ca3fb03335a55acf061b41c00e5c92288eb3c76b02fd54cefd87036eda893ff1ecb2b771d90c5a461f891a00e7b0e504ef89a578a7d35889a757acaea6a08f0825def27817967205e3f5dc9eb23d8086bc30edf0c304a872bdbf25e9ea097369df9963b997a8e4f7890d62ccf1d94e241d0f844c3d0aadd1d707dc9545d7d74af6a3f8a3639f5c59d8d1e35002531d69ccfa1c2f9eb1e97a7426c596d44c0d0c19e3329b51be2caca79d82f6bd4d3ad15ae782b138940ada80118bedbf574e7df7840e5668da16e98ba93c3b6f400eeb2837901ebce7c8c5d0c08943479d744dc07c5fe4e48eb4d6390279a7e3bc4b577218a91374bd9d9225b0695e09aa96405095d63cc28c0637196b9f8e79287ad8054434074c28dafa6d319d3a2c80509cae1d6276e505fc214fcca0953f1d5f61878e339daf90eba96e5e28fa7189ce4f82e9a10087cdb699895a02a3362c10b5d236c9698356f4b25feff40947e4b171a958a4504500295f129771bcce9b79cf7f05b7693b8af72ebbe1195a9b9bce5fff6eda4ee98c596937b330ee899e0068ebef46c705b5074bdb2ef4a295bc008e1593240867e1b35a8061645a6e65a0dbe147339cfe2d9835330c43a193e03fd05c5ee447209543f2fe27763d88eb554bbeae3bfd28551bb6a3c788b8e7f32d051194e5feeb30e9d0e6c9102c376a7842d66b8f13d85f4a387eef5da2a0aa51aa156e2d93c12cf3063c38616687e52c8ef3f5fd99b8b4323538703e8206d9633ca5df8050d78a0f2603a8893945ec77ad866c372512c80e9ed61f1705574e8a80badd9b795e5accdb06de6595c36e1b59509079a45f24a0c3960c98c7f39f5ddaf48269fe0fde25facea1af0266d90c3f2471c4a74d9ace26e716054c460e8c66813676917595d116b7d5e1010a81a0bde9a5e78122411601c0e361d68f18a62546de685e5d77bbeb41b7cca7e01543bdbf0383e70c0f54711aa64b4f64e2cf80754400ca44e225214295d8347be2045cdfe0ab2252ce661af9dabcbc145f364cefb7519e9c85aef38787188b0c045cfa002dc384b0d4aa5df6ac5fe578447792250807e0d2040cf2d500e61aefda7bab9298206528cb067417c72620bed5622413024b6674cf9dbdde75abadc315c58c7336fd3d379f4fe0e68decd1d7ba39382ae6501bb3c79e47a150c7fac2a2a6fd9963f10f36fbedf28b703d6f4059ae6cee26cd3c30655cba2f369b12f06d78621f298ab626e9d8932b6bdbdb83b676bb5d86e8aaad49bc1ef387ac4569a56f14f4b4d42621603f4074e0d0538bd8d023a68aa56f4fd8da9f5cc38798039fcd795c0f48ecb452291ada35c1148c9187ed156453c9e7366e67088b6219eaddb14e862dae3b553b10e0025cef74d0494103cbba2f94afac389ecd2ac9455b15c7223b367e5753a3d189227c2aad480c93728d24352a66642f2abf5a06ce4a192058d959a5060d6a3a40fe19a179fa2eabd80977df41fa6bbd059b8e05ae0c132120d24eff74bb8f854184672e93a0f11bd7205935e96d216f35a9f7b9233c50fd0fa3b9fa297bfe001c37fef267a5134dbc6bc6f7b23c2a02292becd6c4546ce8a261ecc085f0629a952a6db8a1eb53aa1d41a0796140350fdc3bb5a521c7fa64fd2795abfb72bbe8923d0a8d0394f42529f1902e3281ee3c451eda7594c1a73120b3202f0594ef9c71acf48a7a37617ac2fcc60e57cad94cf8bc8a3827ee99d1ab5fda0ba064b65c557d0ed7a82777433385fcbe24d12652c8b6e45efaf570062ba8b23c51d5c5adf8822f01585d023b0e00a394dcce0f8e1241ef240ac38bc95275110c423abad54ad00aa96ab0199a959cda24e9e8328c7dd5d74e1d5bff8b8bb9b49932106186b7e0574a1a0e425f10d724ec9cf96a820dc99df23a97fdeb1c04e4dde6bd177f66e209dc3267b3e32318ab99cc2e88f0d51d1e18e14221bedf548b2b1f7e439e19f1510d959ab791fba5ad5234548d1f780ad61a7cb7b1e01e543fddb1008f16f66927877ddb01328ee377b05fc2100389e205044fa63af1bf8ce2a0642e6ee0c8b65b4ab5ee70132047815c5f6af0a9cba747067ae7afc399eb867c3440a36d78649765bbde65542e324784b9ea21d450dd2953414e978b38e75a23e0851166c7a88737e9d2c693adb54e218b2ab06409bb09c805f82b7b971e4890482ef82969470203b09b4a79dfb6c9dbf478a921ddd533249448626820c24a167925f9128fdac54b1e669d025646e84849de48ff54e2a99ca530d5649b47567c4040cbf3a489f34a3b472b7079403a0e434aed423ec1e9d7274c880bbc7cbeb1a63768c8efefbf971310edf9c85734cd268b3c483aa7f60019a8bbd7644aa4210dc3d9cfa4df3869bb6dd28801778a284ad270c5bfee234bc3ced911d648dea02c5dc22c3b88d56ca962f3f65c858395dc8f30970bb48d1f9e22d712740c07064cc20485d43960e9f2ce92cd053964e7bd6a507fa82e09b92db543627bc3dd42f675d3b3125a6a2de73574c17dc9168ca4cec15685a21e1bf99004e747cde453b67ac62111fe4683006672ed775d2c9f5b227bf0e5f37f29f2496df5d8b9c26a3faad5ff9febaddc4c0c8c95ee1d816fe7a078c2c97338bf408f6dc8ab0982391e0e8b408183e402faa76be4643fdb324b4fcedd3593adfd0dc6117de68a4d7d49fe203713496b548840e71da897a0a89ad9c4e69ec63ddcf3129c79b27df166dd8711f42892f2100e5b08ccaf8836411b7846e69842d27301b959ee8de55570e66251d6a8c8ca56b376b1fc2982e1aaceb54e98495aa1b6aecb21d34ae8b1a313202d49885dc122ba55b3d2b7215e3b5adae27d90aa54dda0a4aeb022441615e84d8046e8d0b587952fe8d146f2743c0406795d96175fb9d32126334e60697aba12ae890de1ecd30a69a3252ec82a44bea62492c95805c16baf2a0bd8feda60e0fe8ff3547d593b08579d9b271f3e7b54607e25dcc83fee2be397c57d484061f4f8073f6a50ab229206231b7efa2b0d63ce7395fc8b4ce9fa26230302accf24614379372537975e99583ff134af6641f6f220fd0d476dff9ceaa907e0f3ad1acd94ec53c163115c439115f3bf9ac63a44258765d6d22e9841e4bfa41405057781e66ceb708b8c0dbb2c29d22fc7f499bbd4a48f9791a0f1a23b826e78e83488e2377d3d8708f1b4c79cc4ea2b7eb6d72e4f6968f17f5ddbcb762d171d5c426cff33a9875dc9140f4a722cb028ad6d61e8581340340b1b78556e40bf1a2493a19ac733b5e56b83091cc71883b9d1f5460aeba9ba3e9a018af5e17b183135cf7607c22cf8cc2a41f88ffd7d30453de697cb307d38225e3687f14bba185f056234f12714908047f526249fa5158e93d5e42fb54f8ce1886ca4b297ed6be9634ee1882af08494420e4c506c149b612e4c2a47dc345f2ba5618aa7064d18aaf619a6ebcbf2bfe9ba23b90b29809824616294ba4656b5c7f92352ebb15ac0fc42d4e448d06609e9bad42940acc824e3ef3850c650c4a17f1e899ad4cca9105d7c453d98db0cb8d802e5293289592b051890cf61a61e1b03c5e5e5c7631676671ce5935f404392fae4906c36d443dda0539e5ee4451a41c92f3d15c8a360ba957d1e54c3392fbb09ff61ceef066a6a41fbcf6256e85f7d0f862232d43d9b636c6a7508673734321800bc", &(0x7f0000000180)=@tcp=r2, 0x1}, 0x20) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)={0x3, 0x1, 0x4, 0x20, 0x52bd, {r3, r4/1000+10000}, {0x1, 0x0, 0xfc, 0x3, 0xa3, 0x1, "b62c5172"}, 0x100, 0x3, @userptr=0x5, 0x0, 0x0, r1}) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[r5], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) accept(r6, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) 16:24:57 executing program 3: socketpair(0x2, 0x6, 0xad01, &(0x7f00000002c0)) 16:24:57 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x20010, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r1, 0x4a8e42c9, 0x4, 0x3ff, 0xff7f, 0x1e4, 0x4, 0xce, 0x78bd, 0x5, 0x3, 0x6}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x29d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x4, 0xbc7, "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", 0x6, 0x40, 0xbe, 0x9, 0x9, 0x81, 0x5e}, r3}}, 0x120) 16:24:57 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2a2400, 0x0, 0x2}, 0x18) 16:24:57 executing program 0: socketpair(0x22, 0x3, 0x1801, &(0x7f00000002c0)) 16:24:57 executing program 1: socketpair(0x2, 0x6, 0xae00, &(0x7f00000002c0)) 16:24:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) io_uring_setup(0x7592, &(0x7f0000000080)={0x0, 0xd0e8, 0x4, 0x1, 0x3cb}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x6b0, 0x6, 0x1, {0x0, 0x0, r1}}, 0x6be) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) 16:24:57 executing program 3: socketpair(0x2, 0x6, 0xae00, &(0x7f00000002c0)) 16:24:57 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 16:24:57 executing program 0: socketpair(0x22, 0x3, 0x1900, &(0x7f00000002c0)) 16:24:57 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:24:57 executing program 1: socketpair(0x2, 0x6, 0xae01, &(0x7f00000002c0)) 16:24:57 executing program 4: socketpair(0x2, 0x6, 0x9f00, &(0x7f00000002c0)) 16:24:57 executing program 3: socketpair(0x2, 0x6, 0xae01, &(0x7f00000002c0)) 16:24:57 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:24:57 executing program 1: socketpair(0x2, 0x6, 0xaf00, &(0x7f00000002c0)) 16:24:57 executing program 0: socketpair(0x22, 0x3, 0x1901, &(0x7f00000002c0)) 16:24:57 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x6400, 0x0) 16:24:57 executing program 1: socketpair(0x2, 0x6, 0xaf01, &(0x7f00000002c0)) 16:24:57 executing program 3: socketpair(0x2, 0x6, 0xaf00, &(0x7f00000002c0)) 16:24:57 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4ce40, 0x0) 16:24:57 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:24:58 executing program 0: socketpair(0x22, 0x3, 0x1a00, &(0x7f00000002c0)) 16:24:58 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x29d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, 0x0, 0x0, 0x4) r2 = io_uring_setup(0x1930, &(0x7f0000000300)={0x0, 0x73ab, 0x0, 0x1, 0xdf}) io_uring_enter(r2, 0x3215, 0xa704, 0x2, &(0x7f0000000180)={[0x7ff]}, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0)=r3, 0x1) r4 = syz_io_uring_complete(r1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r5, 0x0], 0x2}) 16:24:58 executing program 3: socketpair(0x2, 0x6, 0xaf01, &(0x7f00000002c0)) 16:24:58 executing program 1: socketpair(0x2, 0x6, 0xb000, &(0x7f00000002c0)) 16:24:58 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:24:58 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x18) 16:24:58 executing program 0: socketpair(0x22, 0x3, 0x1a01, &(0x7f00000002c0)) 16:24:58 executing program 3: socketpair(0x2, 0x6, 0xb000, &(0x7f00000002c0)) 16:24:58 executing program 1: socketpair(0x2, 0x6, 0xb001, &(0x7f00000002c0)) 16:24:58 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x123000, 0x0) clock_gettime(0x4, &(0x7f0000000000)) 16:24:58 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x18) 16:24:58 executing program 0: socketpair(0x22, 0x3, 0x1b00, &(0x7f00000002c0)) 16:24:58 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x123000, 0x0) clock_gettime(0x4, &(0x7f0000000000)) 16:24:58 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 16:24:58 executing program 3: socketpair(0x2, 0x6, 0xb001, &(0x7f00000002c0)) 16:24:58 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x18) 16:24:58 executing program 1: socketpair(0x2, 0x6, 0xb100, &(0x7f00000002c0)) 16:24:58 executing program 0: socketpair(0x22, 0x3, 0x1b01, &(0x7f00000002c0)) 16:24:58 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x123000, 0x0) clock_gettime(0x4, &(0x7f0000000000)) 16:24:58 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2a2400}, 0x18) 16:24:58 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept(r0, &(0x7f0000001040)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000010c0)=0x80) bind$can_raw(r0, &(0x7f0000001100)={0x1d, r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x77, 0x10, 0x700, 0x34, @dev={0xfe, 0x80, '\x00', 0xc}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x1, 0x85}}) r3 = syz_io_uring_complete(0x0) recvmsg$can_raw(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001380)=""/97, 0x61}, {&(0x7f0000001400)=""/100, 0x64}, {&(0x7f0000001480)=""/207, 0xcf}, {&(0x7f0000001580)=""/69, 0x45}, {&(0x7f0000001600)=""/87, 0x57}, {&(0x7f0000001680)=""/28, 0x1c}, {&(0x7f00000016c0)=""/225, 0xe1}, {&(0x7f00000017c0)=""/99, 0x63}], 0x8}, 0x40000000) 16:24:58 executing program 3: socketpair(0x2, 0x6, 0xb100, &(0x7f00000002c0)) 16:24:58 executing program 1: socketpair(0x2, 0x6, 0xb101, &(0x7f00000002c0)) 16:24:58 executing program 0: socketpair(0x22, 0x3, 0x1c00, &(0x7f00000002c0)) 16:24:58 executing program 4: clock_gettime(0x4, &(0x7f0000000000)) 16:24:58 executing program 1: socketpair(0x2, 0x6, 0xb200, &(0x7f00000002c0)) 16:24:58 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept(r0, &(0x7f0000001040)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000010c0)=0x80) bind$can_raw(r0, &(0x7f0000001100)={0x1d, r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x77, 0x10, 0x700, 0x34, @dev={0xfe, 0x80, '\x00', 0xc}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x1, 0x85}}) r3 = syz_io_uring_complete(0x0) recvmsg$can_raw(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001380)=""/97, 0x61}, {&(0x7f0000001400)=""/100, 0x64}, {&(0x7f0000001480)=""/207, 0xcf}, {&(0x7f0000001580)=""/69, 0x45}, {&(0x7f0000001600)=""/87, 0x57}, {&(0x7f0000001680)=""/28, 0x1c}, {&(0x7f00000016c0)=""/225, 0xe1}, {&(0x7f00000017c0)=""/99, 0x63}], 0x8}, 0x40000000) 16:24:58 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) socketpair(0x2a, 0x1, 0x81, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0xa8, 0x6f, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xc889dfcd63f55821, 0x8000, 0x0, 0x4}}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfde}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 16:24:58 executing program 3: socketpair(0x2, 0x6, 0xb101, &(0x7f00000002c0)) 16:24:58 executing program 0: socketpair(0x22, 0x3, 0x1c01, &(0x7f00000002c0)) 16:24:58 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) 16:24:58 executing program 1: socketpair(0x2, 0x6, 0xb201, &(0x7f00000002c0)) 16:24:59 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xef9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6085}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000140), &(0x7f00000003c0)=0x4) 16:24:59 executing program 3: socketpair(0x2, 0x6, 0xb200, &(0x7f00000002c0)) 16:24:59 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) socketpair(0x2a, 0x1, 0x81, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0xa8, 0x6f, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xc889dfcd63f55821, 0x8000, 0x0, 0x4}}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfde}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 16:24:59 executing program 0: socketpair(0x22, 0x3, 0x1d00, &(0x7f00000002c0)) 16:24:59 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) 16:24:59 executing program 1: socketpair(0x2, 0x6, 0xb300, &(0x7f00000002c0)) 16:24:59 executing program 3: socketpair(0x2, 0x6, 0xb201, &(0x7f00000002c0)) 16:24:59 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) socketpair(0x2a, 0x1, 0x81, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0xa8, 0x6f, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xc889dfcd63f55821, 0x8000, 0x0, 0x4}}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfde}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 16:24:59 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xef9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6085}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000140), &(0x7f00000003c0)=0x4) 16:24:59 executing program 0: socketpair(0x22, 0x3, 0x1d01, &(0x7f00000002c0)) 16:24:59 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) 16:24:59 executing program 3: socketpair(0x2, 0x6, 0xb300, &(0x7f00000002c0)) 16:24:59 executing program 1: socketpair(0x2, 0x6, 0xb301, &(0x7f00000002c0)) 16:24:59 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) socketpair(0x2a, 0x1, 0x81, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0xa8, 0x6f, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xc889dfcd63f55821, 0x8000, 0x0, 0x4}}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 16:24:59 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xef9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6085}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000140), &(0x7f00000003c0)=0x4) 16:24:59 executing program 0: socketpair(0x22, 0x3, 0x1e00, &(0x7f00000002c0)) 16:24:59 executing program 3: socketpair(0x2, 0x6, 0xb301, &(0x7f00000002c0)) 16:24:59 executing program 4: clock_gettime(0x4, 0x0) 16:24:59 executing program 1: socketpair(0x2, 0x6, 0xb400, &(0x7f00000002c0)) 16:24:59 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) socketpair(0x2a, 0x1, 0x81, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0xa8, 0x6f, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xc889dfcd63f55821, 0x8000, 0x0, 0x4}}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$nl_generic(0x10, 0x3, 0x10) 16:24:59 executing program 0: socketpair(0x22, 0x3, 0x1e01, &(0x7f00000002c0)) 16:24:59 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xef9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6085}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) 16:24:59 executing program 4: clock_gettime(0x4, 0x0) 16:24:59 executing program 3: socketpair(0x2, 0x6, 0xb400, &(0x7f00000002c0)) 16:24:59 executing program 1: socketpair(0x2, 0x6, 0xb401, &(0x7f00000002c0)) 16:24:59 executing program 0: socketpair(0x22, 0x3, 0x1f00, &(0x7f00000002c0)) 16:24:59 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) socketpair(0x2a, 0x1, 0x81, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0xa8, 0x6f, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xc889dfcd63f55821, 0x8000, 0x0, 0x4}}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 16:24:59 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xef9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6085}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 16:24:59 executing program 4: clock_gettime(0x4, 0x0) 16:24:59 executing program 1: socketpair(0x2, 0x6, 0xb500, &(0x7f00000002c0)) 16:24:59 executing program 3: socketpair(0x2, 0x6, 0xb401, &(0x7f00000002c0)) 16:24:59 executing program 0: socketpair(0x22, 0x3, 0x1f01, &(0x7f00000002c0)) 16:25:00 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) socketpair(0x2a, 0x1, 0x81, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0xa8, 0x6f, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xc889dfcd63f55821, 0x8000, 0x0, 0x4}}) 16:25:00 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xef9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6085}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) 16:25:00 executing program 1: socketpair(0x2, 0x6, 0xb501, &(0x7f00000002c0)) 16:25:00 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xef9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6085}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 16:25:00 executing program 0: socketpair(0x22, 0x3, 0x2000, &(0x7f00000002c0)) 16:25:00 executing program 3: socketpair(0x2, 0x6, 0xb500, &(0x7f00000002c0)) 16:25:00 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) socketpair(0x2a, 0x1, 0x81, &(0x7f0000000100)) 16:25:00 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000001380)={0x80000000, 0x1, 0x4, 0x20, 0x20, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0x0, 0xf7, 0x1, "2a2b0090"}, 0x3, 0x3, @userptr=0x8b, 0x6, 0x0, r4}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:25:00 executing program 1: socketpair(0x2, 0x6, 0xb600, &(0x7f00000002c0)) 16:25:00 executing program 3: socketpair(0x2, 0x6, 0xb501, &(0x7f00000002c0)) 16:25:00 executing program 0: socketpair(0x22, 0x3, 0x2001, &(0x7f00000002c0)) 16:25:00 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:00 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) 16:25:00 executing program 1: socketpair(0x2, 0x6, 0xb601, &(0x7f00000002c0)) 16:25:00 executing program 3: socketpair(0x2, 0x6, 0xb600, &(0x7f00000002c0)) 16:25:00 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000001380)={0x80000000, 0x1, 0x4, 0x20, 0x20, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0x0, 0xf7, 0x1, "2a2b0090"}, 0x3, 0x3, @userptr=0x8b, 0x6, 0x0, r4}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:25:00 executing program 0: socketpair(0x22, 0x3, 0x2100, &(0x7f00000002c0)) 16:25:00 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:00 executing program 3: socketpair(0x2, 0x6, 0xb601, &(0x7f00000002c0)) 16:25:00 executing program 1: socketpair(0x2, 0x6, 0xb700, &(0x7f00000002c0)) 16:25:00 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 16:25:00 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000001380)={0x80000000, 0x1, 0x4, 0x20, 0x20, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0x0, 0xf7, 0x1, "2a2b0090"}, 0x3, 0x3, @userptr=0x8b, 0x6, 0x0, r4}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:25:00 executing program 3: socketpair(0x2, 0x6, 0xb700, &(0x7f00000002c0)) 16:25:00 executing program 1: socketpair(0x2, 0x6, 0xb701, &(0x7f00000002c0)) 16:25:00 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:00 executing program 0: socketpair(0x22, 0x3, 0x2101, &(0x7f00000002c0)) 16:25:00 executing program 1: socketpair(0x2, 0x6, 0xb800, &(0x7f00000002c0)) 16:25:00 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 16:25:00 executing program 3: socketpair(0x2, 0x6, 0xb701, &(0x7f00000002c0)) 16:25:00 executing program 0: socketpair(0x22, 0x3, 0x2200, &(0x7f00000002c0)) 16:25:00 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000001380)={0x80000000, 0x1, 0x4, 0x20, 0x20, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0x0, 0xf7, 0x1, "2a2b0090"}, 0x3, 0x3, @userptr=0x8b, 0x6, 0x0, r4}) 16:25:00 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0xffffffffffffff25}, 0x2021) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:01 executing program 3: socketpair(0x2, 0x6, 0xb800, &(0x7f00000002c0)) 16:25:01 executing program 1: socketpair(0x2, 0x6, 0xb801, &(0x7f00000002c0)) 16:25:01 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) 16:25:01 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:01 executing program 0: socketpair(0x22, 0x3, 0x2201, &(0x7f00000002c0)) 16:25:01 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) 16:25:01 executing program 3: socketpair(0x2, 0x6, 0xb801, &(0x7f00000002c0)) 16:25:01 executing program 1: socketpair(0x2, 0x6, 0xb900, &(0x7f00000002c0)) 16:25:01 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:01 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) 16:25:01 executing program 0: socketpair(0x22, 0x3, 0x2300, &(0x7f00000002c0)) 16:25:01 executing program 1: socketpair(0x2, 0x6, 0xb901, &(0x7f00000002c0)) 16:25:01 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:01 executing program 3: socketpair(0x2, 0x6, 0xb900, &(0x7f00000002c0)) 16:25:01 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) 16:25:01 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:01 executing program 1: socketpair(0x2, 0x6, 0xba00, &(0x7f00000002c0)) 16:25:01 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:01 executing program 3: socketpair(0x2, 0x6, 0xb901, &(0x7f00000002c0)) 16:25:01 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:01 executing program 0: socketpair(0x22, 0x3, 0x2301, &(0x7f00000002c0)) 16:25:01 executing program 1: socketpair(0x2, 0x6, 0xba01, &(0x7f00000002c0)) 16:25:01 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) 16:25:01 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:01 executing program 3: socketpair(0x2, 0x6, 0xba00, &(0x7f00000002c0)) 16:25:01 executing program 1: socketpair(0x2, 0x6, 0xbb00, &(0x7f00000002c0)) 16:25:01 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:01 executing program 0: socketpair(0x22, 0x3, 0x2400, &(0x7f00000002c0)) 16:25:01 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:01 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) 16:25:01 executing program 1: socketpair(0x2, 0x6, 0xbb01, &(0x7f00000002c0)) 16:25:02 executing program 3: socketpair(0x2, 0x6, 0xba01, &(0x7f00000002c0)) 16:25:02 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:02 executing program 0: socketpair(0x22, 0x3, 0x2401, &(0x7f00000002c0)) 16:25:02 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:02 executing program 1: socketpair(0x2, 0x6, 0xbc00, &(0x7f00000002c0)) 16:25:02 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) 16:25:02 executing program 3: socketpair(0x2, 0x6, 0xbb00, &(0x7f00000002c0)) 16:25:02 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) 16:25:02 executing program 0: socketpair(0x22, 0x3, 0x2500, &(0x7f00000002c0)) 16:25:02 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:02 executing program 1: socketpair(0x2, 0x6, 0xbc01, &(0x7f00000002c0)) 16:25:02 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 16:25:02 executing program 0: socketpair(0x22, 0x3, 0x2501, &(0x7f00000002c0)) 16:25:02 executing program 3: socketpair(0x2, 0x6, 0xbb01, &(0x7f00000002c0)) 16:25:02 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:02 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000280)) 16:25:02 executing program 1: socketpair(0x2, 0x6, 0xbd00, &(0x7f00000002c0)) 16:25:02 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:02 executing program 3: socketpair(0x2, 0x6, 0xbc00, &(0x7f00000002c0)) 16:25:02 executing program 1: socketpair(0x2, 0x6, 0xbd01, &(0x7f00000002c0)) 16:25:02 executing program 0: socketpair(0x22, 0x3, 0x2600, &(0x7f00000002c0)) 16:25:02 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 16:25:02 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:02 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:02 executing program 1: socketpair(0x2, 0x6, 0xbe00, &(0x7f00000002c0)) 16:25:02 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:02 executing program 0: socketpair(0x22, 0x3, 0x2601, &(0x7f00000002c0)) 16:25:02 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:02 executing program 3: socketpair(0x2, 0x6, 0xbc01, &(0x7f00000002c0)) 16:25:02 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:02 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:02 executing program 1: socketpair(0x2, 0x6, 0xbe01, &(0x7f00000002c0)) 16:25:02 executing program 3: socketpair(0x2, 0x6, 0xbd00, &(0x7f00000002c0)) 16:25:02 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) 16:25:02 executing program 0: socketpair(0x22, 0x3, 0x2700, &(0x7f00000002c0)) 16:25:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:03 executing program 3: socketpair(0x2, 0x6, 0xbd01, &(0x7f00000002c0)) 16:25:03 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:03 executing program 1: socketpair(0x2, 0x6, 0xbf00, &(0x7f00000002c0)) 16:25:03 executing program 0: socketpair(0x22, 0x3, 0x2701, &(0x7f00000002c0)) 16:25:03 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:03 executing program 5: socketpair(0x2, 0x6, 0xb701, &(0x7f00000002c0)) 16:25:03 executing program 3: socketpair(0x2, 0x6, 0xbe00, &(0x7f00000002c0)) 16:25:03 executing program 1: socketpair(0x2, 0x6, 0xbf01, &(0x7f00000002c0)) 16:25:03 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:03 executing program 0: socketpair(0x22, 0x3, 0x2800, &(0x7f00000002c0)) 16:25:03 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:03 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffffffffffff41}, 0x10041) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58b}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000680), 0x0, 0x4) 16:25:03 executing program 3: socketpair(0x2, 0x6, 0xbe01, &(0x7f00000002c0)) 16:25:03 executing program 1: socketpair(0x2, 0x6, 0xc000, &(0x7f00000002c0)) 16:25:03 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:03 executing program 0: socketpair(0x22, 0x3, 0x2801, &(0x7f00000002c0)) 16:25:03 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:03 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000001380)={0x80000000, 0x1, 0x4, 0x20, 0x20, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0x0, 0xf7, 0x1, "2a2b0090"}, 0x3, 0x3, @userptr=0x8b, 0x6, 0x0, r4}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:25:03 executing program 3: socketpair(0x2, 0x6, 0xbf00, &(0x7f00000002c0)) 16:25:03 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:03 executing program 1: socketpair(0x2, 0x6, 0xc001, &(0x7f00000002c0)) 16:25:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x40) 16:25:03 executing program 0: socketpair(0x22, 0x3, 0x2900, &(0x7f00000002c0)) 16:25:03 executing program 3: socketpair(0x2, 0x6, 0xbf01, &(0x7f00000002c0)) 16:25:03 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000001380)={0x80000000, 0x1, 0x4, 0x20, 0x20, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0x0, 0xf7, 0x1, "2a2b0090"}, 0x3, 0x3, @userptr=0x8b, 0x6, 0x0, r4}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:25:03 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x40) 16:25:03 executing program 1: socketpair(0x2, 0x6, 0xc100, &(0x7f00000002c0)) 16:25:03 executing program 0: socketpair(0x22, 0x3, 0x2901, &(0x7f00000002c0)) 16:25:03 executing program 3: socketpair(0x2, 0x6, 0xc000, &(0x7f00000002c0)) 16:25:04 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) bind$can_raw(r0, &(0x7f0000000240), 0x10) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:04 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000001380)={0x80000000, 0x1, 0x4, 0x20, 0x20, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0x0, 0xf7, 0x1, "2a2b0090"}, 0x3, 0x3, @userptr=0x8b, 0x6, 0x0, r4}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:25:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x40) 16:25:04 executing program 1: socketpair(0x2, 0x6, 0xc101, &(0x7f00000002c0)) 16:25:04 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:04 executing program 0: socketpair(0x22, 0x3, 0x2a00, &(0x7f00000002c0)) 16:25:04 executing program 3: socketpair(0x2, 0x6, 0xc001, &(0x7f00000002c0)) 16:25:04 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000001380)={0x80000000, 0x1, 0x4, 0x20, 0x20, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0x0, 0xf7, 0x1, "2a2b0090"}, 0x3, 0x3, @userptr=0x8b, 0x6, 0x0, r4}) 16:25:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:04 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000001280), 0x10) 16:25:04 executing program 1: socketpair(0x2, 0x6, 0xc200, &(0x7f00000002c0)) 16:25:04 executing program 3: socketpair(0x2, 0x6, 0xc100, &(0x7f00000002c0)) 16:25:04 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) socket$inet_sctp(0x2, 0x1, 0x84) 16:25:04 executing program 0: socketpair(0x22, 0x3, 0x2a01, &(0x7f00000002c0)) 16:25:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:04 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000001280), 0x10) 16:25:04 executing program 3: socketpair(0x2, 0x6, 0xc101, &(0x7f00000002c0)) 16:25:04 executing program 1: socketpair(0x2, 0x6, 0xc201, &(0x7f00000002c0)) 16:25:04 executing program 3: socketpair(0x2, 0x6, 0xc200, &(0x7f00000002c0)) 16:25:04 executing program 0: socketpair(0x22, 0x3, 0x2b00, &(0x7f00000002c0)) 16:25:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:04 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) 16:25:04 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000001280), 0x10) 16:25:04 executing program 1: socketpair(0x2, 0x6, 0xc300, &(0x7f00000002c0)) 16:25:04 executing program 0: socketpair(0x22, 0x3, 0x2b01, &(0x7f00000002c0)) 16:25:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:04 executing program 3: socketpair(0x2, 0x6, 0xc201, &(0x7f00000002c0)) 16:25:04 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:04 executing program 1: socketpair(0x2, 0x6, 0xc301, &(0x7f00000002c0)) 16:25:04 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) 16:25:04 executing program 0: socketpair(0x22, 0x3, 0x2c00, &(0x7f00000002c0)) 16:25:04 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:05 executing program 1: socketpair(0x2, 0x6, 0xc400, &(0x7f00000002c0)) 16:25:05 executing program 3: socketpair(0x2, 0x6, 0xc300, &(0x7f00000002c0)) 16:25:05 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) 16:25:05 executing program 0: socketpair(0x22, 0x3, 0x2c01, &(0x7f00000002c0)) 16:25:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:05 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:05 executing program 1: socketpair(0x2, 0x6, 0xc401, &(0x7f00000002c0)) 16:25:05 executing program 3: socketpair(0x2, 0x6, 0xc301, &(0x7f00000002c0)) 16:25:05 executing program 0: socketpair(0x22, 0x3, 0x2d00, &(0x7f00000002c0)) 16:25:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:05 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:05 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) 16:25:05 executing program 1: socketpair(0x2, 0x6, 0xc500, &(0x7f00000002c0)) 16:25:05 executing program 3: socketpair(0x2, 0x6, 0xc400, &(0x7f00000002c0)) 16:25:05 executing program 0: socketpair(0x22, 0x3, 0x2d01, &(0x7f00000002c0)) 16:25:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:25:05 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:05 executing program 1: socketpair(0x2, 0x6, 0xc501, &(0x7f00000002c0)) 16:25:05 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 16:25:05 executing program 3: socketpair(0x2, 0x6, 0xc401, &(0x7f00000002c0)) 16:25:05 executing program 0: socketpair(0x22, 0x3, 0x2e00, &(0x7f00000002c0)) 16:25:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={0x0}}, 0x40) 16:25:05 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:05 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:05 executing program 1: socketpair(0x2, 0x6, 0xc600, &(0x7f00000002c0)) 16:25:05 executing program 3: socketpair(0x2, 0x6, 0xc500, &(0x7f00000002c0)) 16:25:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 16:25:05 executing program 0: socketpair(0x22, 0x3, 0x2e01, &(0x7f00000002c0)) 16:25:05 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:05 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) 16:25:05 executing program 1: socketpair(0x2, 0x6, 0xc601, &(0x7f00000002c0)) 16:25:05 executing program 3: socketpair(0x2, 0x6, 0xc501, &(0x7f00000002c0)) 16:25:05 executing program 0: socketpair(0x22, 0x3, 0x2f00, &(0x7f00000002c0)) 16:25:06 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 16:25:06 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000001280), 0x10) 16:25:06 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) 16:25:06 executing program 3: socketpair(0x2, 0x6, 0xc600, &(0x7f00000002c0)) 16:25:06 executing program 1: socketpair(0x2, 0x6, 0xc700, &(0x7f00000002c0)) 16:25:06 executing program 0: socketpair(0x22, 0x3, 0x2f01, &(0x7f00000002c0)) 16:25:06 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) 16:25:06 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000001280), 0x10) 16:25:06 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) 16:25:06 executing program 1: socketpair(0x2, 0x6, 0xc701, &(0x7f00000002c0)) 16:25:06 executing program 3: socketpair(0x2, 0x6, 0xc601, &(0x7f00000002c0)) 16:25:06 executing program 0: socketpair(0x22, 0x3, 0x3000, &(0x7f00000002c0)) 16:25:06 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) socket$can_raw(0x1d, 0x3, 0x1) 16:25:06 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000001280), 0x10) 16:25:06 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000012c0), 0x1, 0x400002) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "d459353c9edcab7c7e2038664e4b75452d659fd842807f1854e9266284edef20d92be010fbcf37c5e0048c870974163e00"}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) bind$can_raw(r0, &(0x7f0000001280), 0x10) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x50200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001340)=r3, 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) 16:25:06 executing program 1: socketpair(0x2, 0x6, 0xc800, &(0x7f00000002c0)) 16:25:06 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) bind$can_raw(r0, 0x0, 0x0) 16:25:06 executing program 0: socketpair(0x22, 0x3, 0x3001, &(0x7f00000002c0)) 16:25:06 executing program 3: socketpair(0x2, 0x6, 0xc700, &(0x7f00000002c0)) 16:25:06 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:06 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) bind$can_raw(r0, 0x0, 0x0) 16:25:06 executing program 1: socketpair(0x2, 0x6, 0xc801, &(0x7f00000002c0)) 16:25:06 executing program 2: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x9, &(0x7f0000000200)={0x0, 0x40000000, 0x4, 0x0, 0x2}, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_complete(r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) accept(r4, &(0x7f0000000100)=@rc={0x1f, @none}, &(0x7f0000000180)=0x80) accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) read$usbmon(r3, 0x0, 0x0) read$usbmon(r3, &(0x7f0000000040)=""/27, 0x1b) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 16:25:06 executing program 3: socketpair(0x2, 0x6, 0xc701, &(0x7f00000002c0)) 16:25:06 executing program 0: socketpair(0x22, 0x3, 0x3100, &(0x7f00000002c0)) 16:25:06 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:06 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) bind$can_raw(r0, 0x0, 0x0) 16:25:06 executing program 1: socketpair(0x2, 0x6, 0xc900, &(0x7f00000002c0)) 16:25:06 executing program 0: socketpair(0x22, 0x3, 0x3101, &(0x7f00000002c0)) 16:25:06 executing program 3: socketpair(0x2, 0x6, 0xc800, &(0x7f00000002c0)) 16:25:06 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:06 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000200)={r2}) r4 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000280)={r2, 0x0, r4}) 16:25:07 executing program 1: socketpair(0x2, 0x6, 0xc901, &(0x7f00000002c0)) 16:25:07 executing program 3: socketpair(0x2, 0x6, 0xc801, &(0x7f00000002c0)) 16:25:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1f, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}, 0x5) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2122) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r3, 0x1e}, 0x10) 16:25:07 executing program 0: socketpair(0x22, 0x3, 0x3200, &(0x7f00000002c0)) 16:25:07 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:07 executing program 1: socketpair(0x2, 0x6, 0xca00, &(0x7f00000002c0)) 16:25:07 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000200)={r2}) r4 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000280)={r2, 0x0, r4}) 16:25:07 executing program 3: socketpair(0x2, 0x6, 0xc900, &(0x7f00000002c0)) 16:25:07 executing program 0: socketpair(0x22, 0x3, 0x3201, &(0x7f00000002c0)) 16:25:07 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:07 executing program 1: socketpair(0x2, 0x6, 0xca01, &(0x7f00000002c0)) 16:25:07 executing program 3: socketpair(0x2, 0x6, 0xc901, &(0x7f00000002c0)) 16:25:07 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000200)={r2}) r4 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000280)={r2, 0x0, r4}) 16:25:07 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x282140) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x14, 0x5, r1}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000b00)=0xe8) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)={0xb, 0x25b6cec2, 0x2, 0x3, 0x1184, r0, 0x3, '\x00', r2, r3, 0x4, 0x1}, 0x40) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket(0x11, 0x80000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x98e, 0x0, 0x0, 0x0, 0x6864}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @alu={0x3, 0x0, 0x8, 0x9, 0x9, 0x1, 0x10}, @map={0x18, 0x9}, @map={0x18, 0x4, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5}, @generic={0x8, 0xb, 0x0, 0x8d, 0x3f}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000140)='syzkaller\x00', 0x10001, 0x92, &(0x7f0000000180)=""/146, 0x41100, 0x8, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x9, 0x7}, 0x10, 0x0, r1}, 0x78) recvmsg$can_raw(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x41) 16:25:07 executing program 1: socketpair(0x2, 0x6, 0xcb00, &(0x7f00000002c0)) 16:25:07 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) 16:25:08 executing program 0: socketpair(0x22, 0x3, 0x3300, &(0x7f00000002c0)) 16:25:08 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000280)={r2}) 16:25:08 executing program 3: socketpair(0x2, 0x6, 0xca00, &(0x7f00000002c0)) 16:25:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0xf9db99c4c163049d}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:25:08 executing program 1: socketpair(0x2, 0x6, 0xcb01, &(0x7f00000002c0)) 16:25:08 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000280)={r2}) 16:25:08 executing program 0: socketpair(0x22, 0x3, 0x3301, &(0x7f00000002c0)) 16:25:08 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) 16:25:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0xf9db99c4c163049d}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:25:08 executing program 3: socketpair(0x2, 0x6, 0xca01, &(0x7f00000002c0)) 16:25:08 executing program 1: socketpair(0x2, 0x6, 0xcc00, &(0x7f00000002c0)) 16:25:08 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000280)={r2}) 16:25:08 executing program 0: socketpair(0x22, 0x3, 0x3400, &(0x7f00000002c0)) 16:25:08 executing program 3: socketpair(0x2, 0x6, 0xcb00, &(0x7f00000002c0)) 16:25:08 executing program 5: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={0x0, 0x3}) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) 16:25:08 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, r1], 0x3}) 16:25:08 executing program 1: socketpair(0x2, 0x6, 0xcc01, &(0x7f00000002c0)) 16:25:08 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000280)={r2}) 16:25:08 executing program 0: socketpair(0x22, 0x3, 0x3401, &(0x7f00000002c0)) 16:25:08 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xfffffffffffffa99, 0x20a01) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1}) 16:25:08 executing program 3: socketpair(0x2, 0x6, 0xcb01, &(0x7f00000002c0)) 16:25:08 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:08 executing program 1: socketpair(0x2, 0x6, 0xcd00, &(0x7f00000002c0)) 16:25:08 executing program 0: socketpair(0x22, 0x3, 0x3500, &(0x7f00000002c0)) 16:25:08 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000280)={r2}) 16:25:08 executing program 1: socketpair(0x2, 0x6, 0xcd01, &(0x7f00000002c0)) 16:25:08 executing program 3: socketpair(0x2, 0x6, 0xcc00, &(0x7f00000002c0)) 16:25:08 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0xfffffffffffffffc, 0xd4341, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000007, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r2, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:08 executing program 0: socketpair(0x22, 0x3, 0x3501, &(0x7f00000002c0)) 16:25:08 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:08 executing program 1: socketpair(0x2, 0x6, 0xce00, &(0x7f00000002c0)) 16:25:08 executing program 3: socketpair(0x2, 0x6, 0xcc01, &(0x7f00000002c0)) 16:25:08 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)={r2}) 16:25:09 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0xfffffffffffffffc, 0xd4341, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000007, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r2, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:09 executing program 0: socketpair(0x22, 0x3, 0x3600, &(0x7f00000002c0)) 16:25:09 executing program 1: socketpair(0x2, 0x6, 0xce01, &(0x7f00000002c0)) 16:25:09 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)={r2}) 16:25:09 executing program 3: socketpair(0x2, 0x6, 0xcd00, &(0x7f00000002c0)) 16:25:09 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0xfffffffffffffffc, 0xd4341, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000007, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r2, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:09 executing program 0: socketpair(0x22, 0x3, 0x3601, &(0x7f00000002c0)) 16:25:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:09 executing program 1: socketpair(0x2, 0x6, 0xcf00, &(0x7f00000002c0)) 16:25:09 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)={r2}) 16:25:09 executing program 3: socketpair(0x2, 0x6, 0xcd01, &(0x7f00000002c0)) 16:25:09 executing program 1: socketpair(0x2, 0x6, 0xcf01, &(0x7f00000002c0)) 16:25:09 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0xfffffffffffffffc, 0xd4341, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000007, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:09 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01064c1, &(0x7f0000000280)={r1}) 16:25:09 executing program 0: socketpair(0x22, 0x3, 0x3700, &(0x7f00000002c0)) 16:25:09 executing program 3: socketpair(0x2, 0x6, 0xce00, &(0x7f00000002c0)) 16:25:09 executing program 1: socketpair(0x2, 0x6, 0xd000, &(0x7f00000002c0)) 16:25:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:09 executing program 0: socketpair(0x22, 0x3, 0x3701, &(0x7f00000002c0)) 16:25:09 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0xfffffffffffffffc, 0xd4341, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:09 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000280)) 16:25:09 executing program 3: socketpair(0x2, 0x6, 0xce01, &(0x7f00000002c0)) 16:25:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:09 executing program 0: socketpair(0x22, 0x3, 0x3800, &(0x7f00000002c0)) 16:25:09 executing program 1: socketpair(0x2, 0x6, 0xd001, &(0x7f00000002c0)) 16:25:09 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000280)) 16:25:09 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0xfffffffffffffffc, 0xd4341, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180), 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:09 executing program 3: socketpair(0x2, 0x6, 0xcf00, &(0x7f00000002c0)) 16:25:09 executing program 1: socketpair(0x2, 0x6, 0xd100, &(0x7f00000002c0)) 16:25:09 executing program 0: socketpair(0x22, 0x3, 0x3801, &(0x7f00000002c0)) 16:25:10 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40102, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:10 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000280)) 16:25:10 executing program 3: socketpair(0x2, 0x6, 0xcf01, &(0x7f00000002c0)) 16:25:10 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180), 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:10 executing program 1: socketpair(0x2, 0x6, 0xd101, &(0x7f00000002c0)) 16:25:10 executing program 0: socketpair(0x22, 0x3, 0x3900, &(0x7f00000002c0)) 16:25:10 executing program 3: socketpair(0x2, 0x6, 0xd000, &(0x7f00000002c0)) 16:25:10 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:10 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180), 0x4) bind$can_raw(r0, &(0x7f0000000240), 0x10) 16:25:10 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000280)) 16:25:10 executing program 1: socketpair(0x2, 0x6, 0xd200, &(0x7f00000002c0)) 16:25:10 executing program 0: socketpair(0x22, 0x3, 0x3901, &(0x7f00000002c0)) 16:25:10 executing program 3: socketpair(0x2, 0x6, 0xd001, &(0x7f00000002c0)) 16:25:10 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) 16:25:10 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:10 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000280)) 16:25:10 executing program 1: socketpair(0x2, 0x6, 0xd201, &(0x7f00000002c0)) 16:25:10 executing program 0: socketpair(0x22, 0x3, 0x3a00, &(0x7f00000002c0)) 16:25:10 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) 16:25:10 executing program 3: socketpair(0x2, 0x6, 0xd100, &(0x7f00000002c0)) 16:25:10 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:10 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000280)) 16:25:10 executing program 0: socketpair(0x22, 0x3, 0x3a01, &(0x7f00000002c0)) 16:25:10 executing program 1: socketpair(0x2, 0x6, 0xd300, &(0x7f00000002c0)) 16:25:10 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) 16:25:10 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x40102, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:10 executing program 3: socketpair(0x2, 0x6, 0xd101, &(0x7f00000002c0)) 16:25:10 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)) 16:25:10 executing program 1: socketpair(0x2, 0x6, 0xd301, &(0x7f00000002c0)) 16:25:10 executing program 0: socketpair(0x22, 0x3, 0x3b00, &(0x7f00000002c0)) 16:25:10 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, 0x0, 0x0) 16:25:10 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x40102, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:10 executing program 3: socketpair(0x2, 0x6, 0xd200, &(0x7f00000002c0)) 16:25:11 executing program 1: socketpair(0x2, 0x6, 0xd400, &(0x7f00000002c0)) 16:25:11 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)) 16:25:11 executing program 0: socketpair(0x22, 0x3, 0x3b01, &(0x7f00000002c0)) 16:25:11 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, 0x0, 0x0) 16:25:11 executing program 3: socketpair(0x2, 0x6, 0xd201, &(0x7f00000002c0)) 16:25:11 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x40102, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:11 executing program 1: socketpair(0x2, 0x6, 0xd401, &(0x7f00000002c0)) 16:25:11 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)) 16:25:11 executing program 0: socketpair(0x22, 0x3, 0x3c00, &(0x7f00000002c0)) 16:25:11 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) bind$can_raw(r0, 0x0, 0x0) 16:25:11 executing program 3: socketpair(0x2, 0x6, 0xd300, &(0x7f00000002c0)) 16:25:11 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:11 executing program 1: socketpair(0x2, 0x6, 0xd500, &(0x7f00000002c0)) 16:25:11 executing program 0: socketpair(0x22, 0x3, 0x3c01, &(0x7f00000002c0)) 16:25:11 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, 0x0) 16:25:11 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 16:25:11 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, 0x0) 16:25:11 executing program 3: socketpair(0x2, 0x6, 0xd301, &(0x7f00000002c0)) 16:25:11 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:11 executing program 1: socketpair(0x2, 0x6, 0xd501, &(0x7f00000002c0)) 16:25:11 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, 0x0) 16:25:11 executing program 0: socketpair(0x22, 0x3, 0x3d00, &(0x7f00000002c0)) 16:25:11 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:11 executing program 5: r0 = syz_io_uring_complete(0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)="f119cf3001dd3edb783421378d0cfa27d931"}, 0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x20, 0xfffffffe}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r5, r0, r1, r6], 0x4) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) r7 = syz_io_uring_complete(r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)="4d0fb33d0c5a28bf52369c9f741a51d30bb2a86c805afa9589d8ff63fcf8344aa8b4c5631cefb380450198dcbd1056f3ab56fa04a2cc19529d9d046f898881bdeee1d889c3d84fea213ea8d3db09c99d", &(0x7f0000000140)=@udp6=r0}, 0x20) 16:25:11 executing program 3: socketpair(0x2, 0x6, 0xd400, &(0x7f00000002c0)) 16:25:11 executing program 1: socketpair(0x2, 0x6, 0xd600, &(0x7f00000002c0)) 16:25:11 executing program 0: socketpair(0x22, 0x3, 0x3d01, &(0x7f00000002c0)) 16:25:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_io_uring_setup(0x7, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={r2, r3+10000000}, 0x1, 0x1, 0x1, {0x0, r5}}, 0x2e) 16:25:11 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 16:25:11 executing program 3: socketpair(0x2, 0x6, 0xd401, &(0x7f00000002c0)) 16:25:11 executing program 1: socketpair(0x2, 0x6, 0xd601, &(0x7f00000002c0)) 16:25:11 executing program 4: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0xffffffffffffffff) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), 0x4) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd, 0x2, 0x8, 0x6, 0x0, 0x1}, 0xffffff01) socket$nl_generic(0x10, 0x3, 0x10) 16:25:11 executing program 0: socketpair(0x22, 0x3, 0x3e00, &(0x7f00000002c0)) 16:25:11 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) 16:25:12 executing program 3: socketpair(0x2, 0x6, 0xd500, &(0x7f00000002c0)) 16:25:12 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x14000) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x240) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x9, 0xffff, 0x2e, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x700, 0x9, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0xb6, &(0x7f0000000280)=""/182, 0x40f00, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x9, 0x7}, 0x10}, 0x78) 16:25:12 executing program 1: socketpair(0x2, 0x6, 0xd700, &(0x7f00000002c0)) 16:25:12 executing program 4: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0xffffffffffffffff) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), 0x4) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd, 0x2, 0x8, 0x6, 0x0, 0x1}, 0xffffff01) socket$nl_generic(0x10, 0x3, 0x10) 16:25:12 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) 16:25:12 executing program 0: socketpair(0x22, 0x3, 0x3e01, &(0x7f00000002c0)) 16:25:12 executing program 3: socketpair(0x2, 0x6, 0xd501, &(0x7f00000002c0)) 16:25:12 executing program 3: socketpair(0x2, 0x6, 0xd600, &(0x7f00000002c0)) 16:25:12 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/37, 0x25}], 0x3}, 0x2000) r0 = socket$can_raw(0x1d, 0x3, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0xfe5a, 0xfa00, {&(0x7f0000000040)}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "1baef9d702931a4d97eb737f25f9b71808a74263082de6f1ddf6749060439c77f7ef4e1daa4fdfdf8abb48d1c8da198e393a0dfd8eea97200d1ded3df3f491157a5973694230d2647d98c538f0600df104e1424945cf891df8baca4a95a26106e24cac04e8fa418d83bff60f1debb1ee0b7ca855299a0d2186801a83af5139cce7a80be2ec0a3e1e2673431ed02be60bc7393c0cfc36cab3c060e6be1be0cd922d52b371bc23aaed5883fd4d9c9b0878ab408dac600f6918fd4c34872235d0149879b2adbd3aeaf0775db8523abeecda7b86fdfe2e46e56de37fdf95fcbbf1f458a6e9e449e52129394e11ca5a11c2ee7e7752f78298566194730a34928dfced", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:25:12 executing program 1: socketpair(0x2, 0x6, 0xd701, &(0x7f00000002c0)) 16:25:12 executing program 0: socketpair(0x22, 0x3, 0x3f00, &(0x7f00000002c0)) 16:25:12 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) 16:25:12 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x14000) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x240) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x9, 0xffff, 0x2e, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x700, 0x9, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0xb6, &(0x7f0000000280)=""/182, 0x40f00, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x9, 0x7}, 0x10}, 0x78) 16:25:12 executing program 1: socketpair(0x2, 0x6, 0xd800, &(0x7f00000002c0)) 16:25:12 executing program 0: socketpair(0x22, 0x3, 0x3f01, &(0x7f00000002c0)) 16:25:12 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x14000) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x240) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x9, 0xffff, 0x2e, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x700, 0x9, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0xb6, &(0x7f0000000280)=""/182, 0x40f00, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x9, 0x7}, 0x10}, 0x78) 16:25:12 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/37, 0x25}], 0x3}, 0x2000) r0 = socket$can_raw(0x1d, 0x3, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0xfe5a, 0xfa00, {&(0x7f0000000040)}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:25:13 executing program 3: socketpair(0x2, 0x6, 0xd601, &(0x7f00000002c0)) 16:25:13 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) 16:25:13 executing program 1: socketpair(0x2, 0x6, 0xd801, &(0x7f00000002c0)) 16:25:13 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x14000) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x240) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x9, 0xffff, 0x2e, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x700, 0x9, 0x5}}) 16:25:13 executing program 0: socketpair(0x22, 0x3, 0x4000, &(0x7f00000002c0)) 16:25:13 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/37, 0x25}], 0x3}, 0x2000) r0 = socket$can_raw(0x1d, 0x3, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0xfe5a, 0xfa00, {&(0x7f0000000040)}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "1baef9d702931a4d97eb737f25f9b71808a74263082de6f1ddf6749060439c77f7ef4e1daa4fdfdf8abb48d1c8da198e393a0dfd8eea97200d1ded3df3f491157a5973694230d2647d98c538f0600df104e1424945cf891df8baca4a95a26106e24cac04e8fa418d83bff60f1debb1ee0b7ca855299a0d2186801a83af5139cce7a80be2ec0a3e1e2673431ed02be60bc7393c0cfc36cab3c060e6be1be0cd922d52b371bc23aaed5883fd4d9c9b0878ab408dac600f6918fd4c34872235d0149879b2adbd3aeaf0775db8523abeecda7b86fdfe2e46e56de37fdf95fcbbf1f458a6e9e449e52129394e11ca5a11c2ee7e7752f78298566194730a34928dfced", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:25:13 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x600880, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x2010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x11c, &(0x7f0000000080)=0x20, 0x0, 0x4) 16:25:13 executing program 3: socketpair(0x2, 0x6, 0xd700, &(0x7f00000002c0)) 16:25:13 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x14000) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x240) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:13 executing program 1: socketpair(0x2, 0x6, 0xd900, &(0x7f00000002c0)) 16:25:13 executing program 0: socketpair(0x22, 0x3, 0x4001, &(0x7f00000002c0)) 16:25:13 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/37, 0x25}], 0x3}, 0x2000) socket$can_raw(0x1d, 0x3, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0xfe5a, 0xfa00, {&(0x7f0000000040)}}, 0x18) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:13 executing program 1: socketpair(0x2, 0x6, 0xd901, &(0x7f00000002c0)) 16:25:13 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x14000) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:13 executing program 3: socketpair(0x2, 0x6, 0xd701, &(0x7f00000002c0)) 16:25:13 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x600880, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x2010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x11c, &(0x7f0000000080)=0x20, 0x0, 0x4) 16:25:13 executing program 0: socketpair(0x22, 0x3, 0x4100, &(0x7f00000002c0)) 16:25:13 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x14000) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:13 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x600880, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x2010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x11c, &(0x7f0000000080)=0x20, 0x0, 0x4) 16:25:13 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/37, 0x25}], 0x3}, 0x2000) socket$can_raw(0x1d, 0x3, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0xfe5a, 0xfa00, {&(0x7f0000000040)}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:13 executing program 1: socketpair(0x2, 0x6, 0xda00, &(0x7f00000002c0)) 16:25:13 executing program 3: socketpair(0x2, 0x6, 0xd800, &(0x7f00000002c0)) 16:25:13 executing program 0: socketpair(0x22, 0x3, 0x4101, &(0x7f00000002c0)) 16:25:13 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x14000) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:13 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/37, 0x25}], 0x3}, 0x2000) socket$can_raw(0x1d, 0x3, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0xfe5a, 0xfa00, {&(0x7f0000000040)}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:13 executing program 1: socketpair(0x2, 0x6, 0xda01, &(0x7f00000002c0)) 16:25:13 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x600880, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x2010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x11c, &(0x7f0000000080)=0x20, 0x0, 0x4) 16:25:13 executing program 3: socketpair(0x2, 0x6, 0xd801, &(0x7f00000002c0)) 16:25:13 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:13 executing program 0: socketpair(0x22, 0x3, 0x4200, &(0x7f00000002c0)) 16:25:13 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x600880, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x2010, r0, 0x8000000) 16:25:13 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/37, 0x25}], 0x3}, 0x2000) socket$can_raw(0x1d, 0x3, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0xfe5a, 0xfa00, {&(0x7f0000000040)}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "1baef9d702931a4d97eb737f25f9b71808a74263082de6f1ddf6749060439c77f7ef4e1daa4fdfdf8abb48d1c8da198e393a0dfd8eea97200d1ded3df3f491157a5973694230d2647d98c538f0600df104e1424945cf891df8baca4a95a26106e24cac04e8fa418d83bff60f1debb1ee0b7ca855299a0d2186801a83af5139cce7a80be2ec0a3e1e2673431ed02be60bc7393c0cfc36cab3c060e6be1be0cd922d52b371bc23aaed5883fd4d9c9b0878ab408dac600f6918fd4c34872235d0149879b2adbd3aeaf0775db8523abeecda7b86fdfe2e46e56de37fdf95fcbbf1f458a6e9e449e52129394e11ca5a11c2ee7e7752f78298566194730a34928dfced", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:13 executing program 1: socketpair(0x2, 0x6, 0xdb00, &(0x7f00000002c0)) 16:25:14 executing program 3: socketpair(0x2, 0x6, 0xd900, &(0x7f00000002c0)) 16:25:14 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:14 executing program 0: socketpair(0x22, 0x3, 0x4201, &(0x7f00000002c0)) 16:25:14 executing program 1: socketpair(0x2, 0x6, 0xdb01, &(0x7f00000002c0)) 16:25:14 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x600880, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) 16:25:14 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/37, 0x25}], 0x3}, 0x2000) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:14 executing program 3: socketpair(0x2, 0x6, 0xd901, &(0x7f00000002c0)) 16:25:14 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:14 executing program 0: socketpair(0x22, 0x3, 0x4300, &(0x7f00000002c0)) 16:25:14 executing program 3: socketpair(0x2, 0x6, 0xda00, &(0x7f00000002c0)) 16:25:14 executing program 1: socketpair(0x2, 0x6, 0xdc00, &(0x7f00000002c0)) 16:25:14 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x600880, 0x0) 16:25:14 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/37, 0x25}], 0x3}, 0x2000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:14 executing program 0: socketpair(0x22, 0x3, 0x4301, &(0x7f00000002c0)) 16:25:14 executing program 1: socketpair(0x2, 0x6, 0xdc01, &(0x7f00000002c0)) 16:25:14 executing program 5: setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:14 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) 16:25:14 executing program 3: socketpair(0x2, 0x6, 0xda01, &(0x7f00000002c0)) 16:25:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "1baef9d702931a4d97eb737f25f9b71808a74263082de6f1ddf6749060439c77f7ef4e1daa4fdfdf8abb48d1c8da198e393a0dfd8eea97200d1ded3df3f491157a5973694230d2647d98c538f0600df104e1424945cf891df8baca4a95a26106e24cac04e8fa418d83bff60f1debb1ee0b7ca855299a0d2186801a83af5139cce7a80be2ec0a3e1e2673431ed02be60bc7393c0cfc36cab3c060e6be1be0cd922d52b371bc23aaed5883fd4d9c9b0878ab408dac600f6918fd4c34872235d0149879b2adbd3aeaf0775db8523abeecda7b86fdfe2e46e56de37fdf95fcbbf1f458a6e9e449e52129394e11ca5a11c2ee7e7752f78298566194730a34928dfced", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:14 executing program 1: socketpair(0x2, 0x6, 0xdd00, &(0x7f00000002c0)) 16:25:14 executing program 0: socketpair(0x22, 0x3, 0x4400, &(0x7f00000002c0)) 16:25:14 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) 16:25:14 executing program 5: setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:14 executing program 3: socketpair(0x2, 0x6, 0xdb00, &(0x7f00000002c0)) 16:25:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:14 executing program 0: socketpair(0x22, 0x3, 0x4401, &(0x7f00000002c0)) 16:25:14 executing program 1: socketpair(0x2, 0x6, 0xdd01, &(0x7f00000002c0)) 16:25:14 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6480, 0x0) 16:25:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:14 executing program 3: socketpair(0x2, 0x6, 0xdb01, &(0x7f00000002c0)) 16:25:14 executing program 5: setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:14 executing program 2: openat$drirender128(0xffffffffffffff9c, 0x0, 0x6480, 0x0) 16:25:15 executing program 0: socketpair(0x22, 0x3, 0x4500, &(0x7f00000002c0)) 16:25:15 executing program 1: socketpair(0x2, 0x6, 0xde00, &(0x7f00000002c0)) 16:25:15 executing program 3: socketpair(0x2, 0x6, 0xdc00, &(0x7f00000002c0)) 16:25:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:15 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:15 executing program 3: socketpair(0x2, 0x6, 0xdc01, &(0x7f00000002c0)) 16:25:15 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:15 executing program 0: socketpair(0x22, 0x3, 0x4501, &(0x7f00000002c0)) 16:25:15 executing program 2: openat$drirender128(0xffffffffffffff9c, 0x0, 0x6480, 0x0) 16:25:15 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:15 executing program 1: socketpair(0x2, 0x6, 0xde01, &(0x7f00000002c0)) 16:25:15 executing program 3: socketpair(0x2, 0x6, 0xdd00, &(0x7f00000002c0)) 16:25:15 executing program 2: openat$drirender128(0xffffffffffffff9c, 0x0, 0x6480, 0x0) 16:25:15 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000040)=0x200, 0x4) 16:25:15 executing program 0: socketpair(0x22, 0x3, 0x4600, &(0x7f00000002c0)) 16:25:15 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:15 executing program 1: socketpair(0x2, 0x6, 0xdf00, &(0x7f00000002c0)) 16:25:15 executing program 3: socketpair(0x2, 0x6, 0xdd01, &(0x7f00000002c0)) 16:25:15 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x5, 0x80000001, "1baef9d702931a4d97eb737f25f9b71808a74263082de6f1ddf6749060439c77f7ef4e1daa4fdfdf8abb48d1c8da198e393a0dfd8eea97200d1ded3df3f491157a5973694230d2647d98c538f0600df104e1424945cf891df8baca4a95a26106e24cac04e8fa418d83bff60f1debb1ee0b7ca855299a0d2186801a83af5139cce7a80be2ec0a3e1e2673431ed02be60bc7393c0cfc36cab3c060e6be1be0cd922d52b371bc23aaed5883fd4d9c9b0878ab408dac600f6918fd4c34872235d0149879b2adbd3aeaf0775db8523abeecda7b86fdfe2e46e56de37fdf95fcbbf1f458a6e9e449e52129394e11ca5a11c2ee7e7752f78298566194730a34928dfced", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:15 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000040)=0x200, 0x4) 16:25:15 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 16:25:15 executing program 1: socketpair(0x2, 0x6, 0xdf01, &(0x7f00000002c0)) 16:25:15 executing program 0: socketpair(0x22, 0x3, 0x4601, &(0x7f00000002c0)) 16:25:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) 16:25:15 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 16:25:15 executing program 3: socketpair(0x2, 0x6, 0xde00, &(0x7f00000002c0)) 16:25:15 executing program 1: socketpair(0x2, 0x6, 0xe000, &(0x7f00000002c0)) 16:25:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) 16:25:15 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 16:25:15 executing program 0: socketpair(0x22, 0x3, 0x4700, &(0x7f00000002c0)) 16:25:15 executing program 5: socketpair(0x2, 0x6, 0xdf00, &(0x7f00000002c0)) 16:25:15 executing program 3: socketpair(0x2, 0x6, 0xde01, &(0x7f00000002c0)) 16:25:15 executing program 1: socketpair(0x2, 0x6, 0xe001, &(0x7f00000002c0)) 16:25:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) 16:25:16 executing program 0: socketpair(0x22, 0x3, 0x4701, &(0x7f00000002c0)) 16:25:16 executing program 5: socketpair(0x2, 0x6, 0xdc00, &(0x7f00000002c0)) 16:25:16 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 16:25:16 executing program 3: socketpair(0x2, 0x6, 0xdf00, &(0x7f00000002c0)) 16:25:16 executing program 0: socketpair(0x22, 0x3, 0x4800, &(0x7f00000002c0)) 16:25:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x80000001, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:16 executing program 1: socketpair(0x2, 0x6, 0xe100, &(0x7f00000002c0)) 16:25:16 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000001c0)={0x0, 0x20}) 16:25:16 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbde, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xecc4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x88}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4800) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x1, 0x2, 0x7}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) 16:25:16 executing program 3: socketpair(0x2, 0x6, 0xdf01, &(0x7f00000002c0)) 16:25:16 executing program 0: socketpair(0x22, 0x3, 0x4801, &(0x7f00000002c0)) 16:25:16 executing program 1: socketpair(0x2, 0x6, 0xe101, &(0x7f00000002c0)) 16:25:16 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000001c0)={0x0, 0x20}) 16:25:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x3f, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:16 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x727e82, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000300)={r2, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01064c2, &(0x7f0000000380)={r2, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000003c0)={r2, 0x1}) r9 = syz_open_dev$dri(&(0x7f0000000480), 0x800, 0x101401) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r9, 0xc00864c0, &(0x7f00000004c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000440)={&(0x7f0000000400)=[r2, r2, r5, r6, r7, r2, r2, r8], 0x7, 0x8, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, r2, 0x0, r2, 0x0, 0x0], &(0x7f0000000180)=[0x0, r4], 0x7fff, 0x8, 0x2}) syz_io_uring_setup(0x62ea, &(0x7f0000000200)={0x0, 0x4df0, 0x1, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 16:25:16 executing program 3: socketpair(0x2, 0x6, 0xe000, &(0x7f00000002c0)) 16:25:16 executing program 1: socketpair(0x2, 0x6, 0xe200, &(0x7f00000002c0)) 16:25:16 executing program 0: socketpair(0x22, 0x3, 0x4900, &(0x7f00000002c0)) 16:25:16 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000001c0)={0x0, 0x20}) 16:25:16 executing program 1: socketpair(0x2, 0x6, 0xe201, &(0x7f00000002c0)) 16:25:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0xff, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:16 executing program 5: socketpair(0x22, 0x3, 0x4801, &(0x7f00000002c0)) 16:25:16 executing program 3: socketpair(0x2, 0x6, 0xe001, &(0x7f00000002c0)) 16:25:16 executing program 0: socketpair(0x22, 0x3, 0x4901, &(0x7f00000002c0)) 16:25:16 executing program 1: socketpair(0x2, 0x6, 0xe300, &(0x7f00000002c0)) 16:25:16 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) 16:25:16 executing program 3: socketpair(0x2, 0x6, 0xe100, &(0x7f00000002c0)) 16:25:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x7, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:16 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x2a140) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000000) 16:25:16 executing program 0: socketpair(0x22, 0x3, 0x4a00, &(0x7f00000002c0)) 16:25:16 executing program 1: socketpair(0x2, 0x6, 0xe301, &(0x7f00000002c0)) 16:25:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x2, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:17 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 16:25:17 executing program 0: socketpair(0x22, 0x3, 0x4a01, &(0x7f00000002c0)) 16:25:17 executing program 3: socketpair(0x2, 0x6, 0xe101, &(0x7f00000002c0)) 16:25:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x81, 0x1}}}, 0x120) 16:25:17 executing program 1: socketpair(0x2, 0x6, 0xe400, &(0x7f00000002c0)) 16:25:17 executing program 0: socketpair(0x22, 0x3, 0x4b00, &(0x7f00000002c0)) 16:25:17 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) 16:25:17 executing program 3: socketpair(0x2, 0x6, 0xe200, &(0x7f00000002c0)) 16:25:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x18e}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x20000040) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xa400, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x123901) 16:25:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x81, 0x1}}}, 0x120) 16:25:17 executing program 1: socketpair(0x2, 0x6, 0xe401, &(0x7f00000002c0)) 16:25:17 executing program 0: socketpair(0x22, 0x3, 0x4b01, &(0x7f00000002c0)) 16:25:17 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) 16:25:17 executing program 3: socketpair(0x2, 0x6, 0xe201, &(0x7f00000002c0)) 16:25:17 executing program 1: socketpair(0x2, 0x6, 0xe500, &(0x7f00000002c0)) 16:25:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1}}}, 0x120) 16:25:17 executing program 3: socketpair(0x2, 0x6, 0xe300, &(0x7f00000002c0)) 16:25:17 executing program 2: read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/245, 0xf5) 16:25:17 executing program 0: socketpair(0x22, 0x3, 0x4c00, &(0x7f00000002c0)) 16:25:18 executing program 1: socketpair(0x2, 0x6, 0xe501, &(0x7f00000002c0)) 16:25:18 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0xf6ffffff00000000) 16:25:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 16:25:18 executing program 2: read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/245, 0xf5) 16:25:18 executing program 0: socketpair(0x22, 0x3, 0x4c01, &(0x7f00000002c0)) 16:25:18 executing program 3: socketpair(0x2, 0x6, 0xe301, &(0x7f00000002c0)) 16:25:18 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x3f00000000000000) 16:25:18 executing program 1: socketpair(0x2, 0x6, 0xe600, &(0x7f00000002c0)) 16:25:18 executing program 3: socketpair(0x2, 0x6, 0xe400, &(0x7f00000002c0)) 16:25:18 executing program 0: socketpair(0x22, 0x3, 0x4d00, &(0x7f00000002c0)) 16:25:18 executing program 2: read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/245, 0xf5) 16:25:18 executing program 1: socketpair(0x2, 0x6, 0xe601, &(0x7f00000002c0)) 16:25:18 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xc25, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[r2, r0]}, 0x2) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getgid() 16:25:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "1baef9d702931a4d97eb737f25f9b71808a74263082de6f1ddf6749060439c77f7ef4e1daa4fdfdf8abb48d1c8da198e393a0dfd8eea97200d1ded3df3f491157a5973694230d2647d98c538f0600df104e1424945cf891df8baca4a95a26106e24cac04e8fa418d83bff60f1debb1ee0b7ca855299a0d2186801a83af5139cce7a80be2ec0a3e1e2673431ed02be60bc7393c0cfc36cab3c060e6be1be0cd922d52b371bc23aaed5883fd4d9c9b0878ab408dac600f6918fd4c34872235d0149879b2adbd3aeaf0775db8523abeecda7b86fdfe2e46e56de37fdf95fcbbf1f458a6e9e449e52129394e11ca5a11c2ee7e7752f78298566194730a34928dfced"}}}, 0x120) 16:25:18 executing program 0: socketpair(0x22, 0x3, 0x4d01, &(0x7f00000002c0)) 16:25:18 executing program 3: socketpair(0x2, 0x6, 0xe401, &(0x7f00000002c0)) 16:25:18 executing program 1: socketpair(0x2, 0x6, 0xe700, &(0x7f00000002c0)) 16:25:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) 16:25:18 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x800) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) 16:25:18 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xc25, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[r2, r0]}, 0x2) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getgid() 16:25:18 executing program 3: socketpair(0x2, 0x6, 0xe500, &(0x7f00000002c0)) 16:25:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) 16:25:18 executing program 0: socketpair(0x22, 0x3, 0x4e00, &(0x7f00000002c0)) 16:25:18 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x800) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) 16:25:18 executing program 1: socketpair(0x2, 0x6, 0xe701, &(0x7f00000002c0)) 16:25:18 executing program 0: socketpair(0x22, 0x3, 0x4e01, &(0x7f00000002c0)) 16:25:18 executing program 3: socketpair(0x2, 0x6, 0xe501, &(0x7f00000002c0)) 16:25:18 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x800) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) 16:25:18 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xc25, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[r2, r0]}, 0x2) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) getgid() 16:25:18 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x600000000000000) 16:25:18 executing program 1: socketpair(0x2, 0x6, 0xe800, &(0x7f00000002c0)) 16:25:18 executing program 3: socketpair(0x2, 0x6, 0xe600, &(0x7f00000002c0)) 16:25:19 executing program 0: socketpair(0x22, 0x3, 0x4f00, &(0x7f00000002c0)) 16:25:19 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x8, 0x301800) r1 = socket(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f00000001c0)="454e6ad9d48456901b89ca45556546463f1206d139ca2b3fec4ddda5f8fb6b785646abe6a14868e7b798c1813b49c2cea316cc731a63065b62123ebd91654acbf421c79675987bd9c379fdf3d3c7331cfd05dee969a07013d5427be47c337e08d2c0aad3880d84f930e6e92829fcaaa02a3ccbfdf77ca156bffe6a5caac5e19a386d53e8b9c0bc76db59e395f1599b41c547e3c5fbb53caa199cd893e26b33", &(0x7f0000000040)=""/24}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000000), 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = io_uring_setup(0x2211, &(0x7f0000000140)={0x0, 0x4032, 0x1, 0x0, 0x376, 0x0, r3}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x48000, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x80000000, 0xa0102) r9 = socket(0x8, 0x3, 0x58) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[r6, r3, r2, r1, r7, r8, r9], 0x7) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) r10 = accept(r2, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r10, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40001121) 16:25:19 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xc25, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[r2, r0]}, 0x2) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:25:19 executing program 1: socketpair(0x2, 0x6, 0xe801, &(0x7f00000002c0)) 16:25:19 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) 16:25:19 executing program 3: socketpair(0x2, 0x6, 0xe601, &(0x7f00000002c0)) 16:25:19 executing program 0: socketpair(0x22, 0x3, 0x4f01, &(0x7f00000002c0)) 16:25:19 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xc25, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[r2, r0]}, 0x2) 16:25:19 executing program 1: socketpair(0x2, 0x6, 0xe900, &(0x7f00000002c0)) 16:25:19 executing program 3: socketpair(0x2, 0x6, 0xe700, &(0x7f00000002c0)) 16:25:19 executing program 0: socketpair(0x22, 0x3, 0x5000, &(0x7f00000002c0)) 16:25:19 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x8, 0x301800) r1 = socket(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f00000001c0)="454e6ad9d48456901b89ca45556546463f1206d139ca2b3fec4ddda5f8fb6b785646abe6a14868e7b798c1813b49c2cea316cc731a63065b62123ebd91654acbf421c79675987bd9c379fdf3d3c7331cfd05dee969a07013d5427be47c337e08d2c0aad3880d84f930e6e92829fcaaa02a3ccbfdf77ca156bffe6a5caac5e19a386d53e8b9c0bc76db59e395f1599b41c547e3c5fbb53caa199cd893e26b33", &(0x7f0000000040)=""/24}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000000), 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = io_uring_setup(0x2211, &(0x7f0000000140)={0x0, 0x4032, 0x1, 0x0, 0x376, 0x0, r3}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x48000, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x80000000, 0xa0102) r9 = socket(0x8, 0x3, 0x58) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[r6, r3, r2, r1, r7, r8, r9], 0x7) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) r10 = accept(r2, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r10, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40001121) 16:25:19 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0]}, 0x2) 16:25:19 executing program 1: socketpair(0x2, 0x6, 0xe901, &(0x7f00000002c0)) 16:25:19 executing program 0: socketpair(0x22, 0x3, 0x5001, &(0x7f00000002c0)) 16:25:19 executing program 3: socketpair(0x2, 0x6, 0xe701, &(0x7f00000002c0)) 16:25:20 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0]}, 0x2) 16:25:20 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) 16:25:20 executing program 1: socketpair(0x2, 0x6, 0xea00, &(0x7f00000002c0)) 16:25:20 executing program 0: socketpair(0x22, 0x3, 0x5100, &(0x7f00000002c0)) 16:25:20 executing program 3: socketpair(0x2, 0x6, 0xe800, &(0x7f00000002c0)) 16:25:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) socket(0x2a, 0x3, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x114, 0x0, 0x0, 0x4) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r9, 0x8000, 0x0, 0x38c, 0x5, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="0cb4b4f046138af4dbe25a49f85e84b82f6a55447e1e241ab7ab61624039bc3f64e3ade987adbed77f3888a79f0f028e4f944619fe75e69f3ce1ffc509ce4c028406182b2ea08b22ed202814191a2b146124f29c2881e6b7f2d76c67d7614d08f0ceab1227a53df2af07825232b7fd1a251000b8c7ee2456c00aa73134bb3cf36c2dc14911f887", 0x87, 0x0, 0x0, {0x0, r6}}, 0x1ff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:25:20 executing program 1: socketpair(0x2, 0x6, 0xea01, &(0x7f00000002c0)) 16:25:20 executing program 3: socketpair(0x2, 0x6, 0xe801, &(0x7f00000002c0)) 16:25:20 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0]}, 0x2) 16:25:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) socket(0x2a, 0x3, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x114, 0x0, 0x0, 0x4) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r9, 0x8000, 0x0, 0x38c, 0x5, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="0cb4b4f046138af4dbe25a49f85e84b82f6a55447e1e241ab7ab61624039bc3f64e3ade987adbed77f3888a79f0f028e4f944619fe75e69f3ce1ffc509ce4c028406182b2ea08b22ed202814191a2b146124f29c2881e6b7f2d76c67d7614d08f0ceab1227a53df2af07825232b7fd1a251000b8c7ee2456c00aa73134bb3cf36c2dc14911f887", 0x87, 0x0, 0x0, {0x0, r6}}, 0x1ff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:25:20 executing program 0: socketpair(0x22, 0x3, 0x5101, &(0x7f00000002c0)) 16:25:20 executing program 3: socketpair(0x2, 0x6, 0xe900, &(0x7f00000002c0)) 16:25:20 executing program 1: socketpair(0x2, 0x6, 0xeb00, &(0x7f00000002c0)) 16:25:21 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) 16:25:21 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0]}, 0x2) 16:25:21 executing program 0: socketpair(0x22, 0x3, 0x5200, &(0x7f00000002c0)) 16:25:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) socket(0x2a, 0x3, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x114, 0x0, 0x0, 0x4) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r9, 0x8000, 0x0, 0x38c, 0x5, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="0cb4b4f046138af4dbe25a49f85e84b82f6a55447e1e241ab7ab61624039bc3f64e3ade987adbed77f3888a79f0f028e4f944619fe75e69f3ce1ffc509ce4c028406182b2ea08b22ed202814191a2b146124f29c2881e6b7f2d76c67d7614d08f0ceab1227a53df2af07825232b7fd1a251000b8c7ee2456c00aa73134bb3cf36c2dc14911f887", 0x87, 0x0, 0x0, {0x0, r6}}, 0x1ff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:25:21 executing program 3: socketpair(0x2, 0x6, 0xe901, &(0x7f00000002c0)) 16:25:21 executing program 1: socketpair(0x2, 0x6, 0xeb01, &(0x7f00000002c0)) 16:25:21 executing program 3: socketpair(0x2, 0x6, 0xea00, &(0x7f00000002c0)) 16:25:21 executing program 0: socketpair(0x22, 0x3, 0x5201, &(0x7f00000002c0)) 16:25:21 executing program 1: socketpair(0x2, 0x6, 0xec00, &(0x7f00000002c0)) 16:25:21 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0]}, 0x2) 16:25:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) socket(0x2a, 0x3, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x114, 0x0, 0x0, 0x4) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r9, 0x8000, 0x0, 0x38c, 0x5, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="0cb4b4f046138af4dbe25a49f85e84b82f6a55447e1e241ab7ab61624039bc3f64e3ade987adbed77f3888a79f0f028e4f944619fe75e69f3ce1ffc509ce4c028406182b2ea08b22ed202814191a2b146124f29c2881e6b7f2d76c67d7614d08f0ceab1227a53df2af07825232b7fd1a251000b8c7ee2456c00aa73134bb3cf36c2dc14911f887", 0x87, 0x0, 0x0, {0x0, r6}}, 0x1ff) 16:25:21 executing program 3: socketpair(0x2, 0x6, 0xea01, &(0x7f00000002c0)) 16:25:21 executing program 2: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/245, 0xf5) 16:25:21 executing program 0: socketpair(0x22, 0x3, 0x5300, &(0x7f00000002c0)) 16:25:21 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:21 executing program 1: socketpair(0x2, 0x6, 0xec01, &(0x7f00000002c0)) 16:25:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x114, 0x0, 0x0, 0x4) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r8, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r8, 0x8000, 0x0, 0x38c, 0x5, 0x0, {0x0, r5}}, 0x9) 16:25:21 executing program 3: socketpair(0x2, 0x6, 0xeb00, &(0x7f00000002c0)) 16:25:22 executing program 3: socketpair(0x2, 0x6, 0xeb01, &(0x7f00000002c0)) 16:25:22 executing program 1: socketpair(0x2, 0x6, 0xed00, &(0x7f00000002c0)) 16:25:22 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:22 executing program 0: socketpair(0x22, 0x3, 0x5301, &(0x7f00000002c0)) 16:25:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) 16:25:22 executing program 3: socketpair(0x2, 0x6, 0xec00, &(0x7f00000002c0)) 16:25:22 executing program 2: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/245, 0xf5) 16:25:22 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:22 executing program 1: socketpair(0x2, 0x6, 0xed01, &(0x7f00000002c0)) 16:25:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) 16:25:22 executing program 0: socketpair(0x22, 0x3, 0x5400, &(0x7f00000002c0)) 16:25:22 executing program 3: socketpair(0x2, 0x6, 0xec01, &(0x7f00000002c0)) 16:25:22 executing program 2: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/245, 0xf5) 16:25:22 executing program 1: socketpair(0x2, 0x6, 0xee00, &(0x7f00000002c0)) 16:25:22 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:22 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) read$usbmon(r0, 0x0, 0x0) 16:25:22 executing program 3: socketpair(0x2, 0x6, 0xed00, &(0x7f00000002c0)) 16:25:22 executing program 0: socketpair(0x22, 0x3, 0x5401, &(0x7f00000002c0)) 16:25:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) 16:25:22 executing program 1: socketpair(0x2, 0x6, 0xee01, &(0x7f00000002c0)) 16:25:22 executing program 5: r0 = syz_io_uring_setup(0x7, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:22 executing program 3: socketpair(0x2, 0x6, 0xed01, &(0x7f00000002c0)) 16:25:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) 16:25:22 executing program 0: socketpair(0x22, 0x3, 0x5500, &(0x7f00000002c0)) 16:25:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, 0x0, 0x0, 0x4) 16:25:22 executing program 3: socketpair(0x2, 0x6, 0xee00, &(0x7f00000002c0)) 16:25:22 executing program 5: r0 = syz_io_uring_setup(0x7, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:22 executing program 1: socketpair(0x2, 0x6, 0xef00, &(0x7f00000002c0)) 16:25:22 executing program 0: socketpair(0x22, 0x3, 0x5501, &(0x7f00000002c0)) 16:25:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) 16:25:23 executing program 5: r0 = syz_io_uring_setup(0x7, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:23 executing program 1: socketpair(0x2, 0x6, 0xef01, &(0x7f00000002c0)) 16:25:23 executing program 3: socketpair(0x2, 0x6, 0xee01, &(0x7f00000002c0)) 16:25:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:23 executing program 0: socketpair(0x22, 0x3, 0x5600, &(0x7f00000002c0)) 16:25:23 executing program 1: socketpair(0x2, 0x6, 0xf000, &(0x7f00000002c0)) 16:25:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:23 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) 16:25:23 executing program 3: socketpair(0x2, 0x6, 0xef00, &(0x7f00000002c0)) 16:25:23 executing program 0: socketpair(0x22, 0x3, 0x5601, &(0x7f00000002c0)) 16:25:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:23 executing program 3: socketpair(0x2, 0x6, 0xef01, &(0x7f00000002c0)) 16:25:23 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:23 executing program 1: socketpair(0x2, 0x6, 0xf001, &(0x7f00000002c0)) 16:25:23 executing program 0: socketpair(0x22, 0x3, 0x5700, &(0x7f00000002c0)) 16:25:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) 16:25:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:23 executing program 3: socketpair(0x2, 0x6, 0xf000, &(0x7f00000002c0)) 16:25:23 executing program 1: socketpair(0x2, 0x6, 0xf100, &(0x7f00000002c0)) 16:25:23 executing program 0: socketpair(0x22, 0x3, 0x5701, &(0x7f00000002c0)) 16:25:23 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, 0x0, 0x0, 0x4) 16:25:23 executing program 3: socketpair(0x2, 0x6, 0xf001, &(0x7f00000002c0)) 16:25:23 executing program 1: socketpair(0x2, 0x6, 0xf101, &(0x7f00000002c0)) 16:25:23 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:23 executing program 0: socketpair(0x22, 0x3, 0x5800, &(0x7f00000002c0)) 16:25:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:23 executing program 1: socketpair(0x2, 0x6, 0xf200, &(0x7f00000002c0)) 16:25:23 executing program 3: socketpair(0x2, 0x6, 0xf100, &(0x7f00000002c0)) 16:25:24 executing program 0: socketpair(0x22, 0x3, 0x5801, &(0x7f00000002c0)) 16:25:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:24 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:24 executing program 1: socketpair(0x2, 0x6, 0xf201, &(0x7f00000002c0)) 16:25:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:24 executing program 3: socketpair(0x2, 0x6, 0xf101, &(0x7f00000002c0)) 16:25:24 executing program 0: socketpair(0x22, 0x3, 0x5900, &(0x7f00000002c0)) 16:25:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:24 executing program 1: socketpair(0x2, 0x6, 0xf300, &(0x7f00000002c0)) 16:25:24 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:24 executing program 3: socketpair(0x2, 0x6, 0xf200, &(0x7f00000002c0)) 16:25:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:24 executing program 0: socketpair(0x22, 0x3, 0x5901, &(0x7f00000002c0)) 16:25:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:24 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:24 executing program 1: socketpair(0x2, 0x6, 0xf301, &(0x7f00000002c0)) 16:25:24 executing program 3: socketpair(0x2, 0x6, 0xf201, &(0x7f00000002c0)) 16:25:24 executing program 0: socketpair(0x22, 0x3, 0x5a00, &(0x7f00000002c0)) 16:25:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:24 executing program 1: socketpair(0x2, 0x6, 0xf400, &(0x7f00000002c0)) 16:25:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:24 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:24 executing program 0: socketpair(0x22, 0x3, 0x5a01, &(0x7f00000002c0)) 16:25:24 executing program 3: socketpair(0x2, 0x6, 0xf300, &(0x7f00000002c0)) 16:25:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:24 executing program 1: socketpair(0x2, 0x6, 0xf401, &(0x7f00000002c0)) 16:25:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:24 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:24 executing program 3: socketpair(0x2, 0x6, 0xf301, &(0x7f00000002c0)) 16:25:24 executing program 0: socketpair(0x22, 0x3, 0x5b00, &(0x7f00000002c0)) 16:25:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 1: socketpair(0x2, 0x6, 0xf500, &(0x7f00000002c0)) 16:25:25 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 16:25:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 3: socketpair(0x2, 0x6, 0xf400, &(0x7f00000002c0)) 16:25:25 executing program 0: socketpair(0x22, 0x3, 0x5b01, &(0x7f00000002c0)) 16:25:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 1: socketpair(0x2, 0x6, 0xf501, &(0x7f00000002c0)) 16:25:25 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 16:25:25 executing program 3: socketpair(0x2, 0x6, 0xf401, &(0x7f00000002c0)) 16:25:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 0: socketpair(0x22, 0x3, 0x5c00, &(0x7f00000002c0)) 16:25:25 executing program 1: socketpair(0x2, 0x6, 0xf600, &(0x7f00000002c0)) 16:25:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 16:25:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 3: socketpair(0x2, 0x6, 0xf500, &(0x7f00000002c0)) 16:25:25 executing program 0: socketpair(0x22, 0x3, 0x5c01, &(0x7f00000002c0)) 16:25:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 1: socketpair(0x2, 0x6, 0xf601, &(0x7f00000002c0)) 16:25:25 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:25 executing program 3: socketpair(0x2, 0x6, 0xf501, &(0x7f00000002c0)) 16:25:25 executing program 0: socketpair(0x22, 0x3, 0x5d00, &(0x7f00000002c0)) 16:25:25 executing program 3: socketpair(0x2, 0x6, 0xf600, &(0x7f00000002c0)) 16:25:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 1: socketpair(0x2, 0x6, 0xf700, &(0x7f00000002c0)) 16:25:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:25 executing program 0: socketpair(0x22, 0x3, 0x5d01, &(0x7f00000002c0)) 16:25:25 executing program 3: socketpair(0x2, 0x6, 0xf601, &(0x7f00000002c0)) 16:25:25 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:26 executing program 0: socketpair(0x22, 0x3, 0x5e00, &(0x7f00000002c0)) 16:25:26 executing program 1: socketpair(0x2, 0x6, 0xf701, &(0x7f00000002c0)) 16:25:26 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 16:25:26 executing program 3: socketpair(0x2, 0x6, 0xf700, &(0x7f00000002c0)) 16:25:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:26 executing program 1: socketpair(0x2, 0x6, 0xf800, &(0x7f00000002c0)) 16:25:26 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:26 executing program 0: socketpair(0x22, 0x3, 0x5e01, &(0x7f00000002c0)) 16:25:26 executing program 3: socketpair(0x2, 0x6, 0xf701, &(0x7f00000002c0)) 16:25:26 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, 0x0}, 0x0) 16:25:26 executing program 1: socketpair(0x2, 0x6, 0xf801, &(0x7f00000002c0)) 16:25:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:26 executing program 0: socketpair(0x22, 0x3, 0x5f00, &(0x7f00000002c0)) 16:25:26 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:26 executing program 3: socketpair(0x2, 0x6, 0xf800, &(0x7f00000002c0)) 16:25:26 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, 0x0}, 0x0) 16:25:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:26 executing program 0: socketpair(0x22, 0x3, 0x5f01, &(0x7f00000002c0)) 16:25:26 executing program 1: socketpair(0x2, 0x6, 0xf900, &(0x7f00000002c0)) 16:25:26 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:26 executing program 3: socketpair(0x2, 0x6, 0xf801, &(0x7f00000002c0)) 16:25:26 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, 0x0}, 0x0) 16:25:26 executing program 0: socketpair(0x22, 0x3, 0x6000, &(0x7f00000002c0)) 16:25:26 executing program 1: socketpair(0x2, 0x6, 0xf901, &(0x7f00000002c0)) 16:25:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:26 executing program 3: socketpair(0x2, 0x6, 0xf900, &(0x7f00000002c0)) 16:25:26 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:26 executing program 0: socketpair(0x22, 0x3, 0x6001, &(0x7f00000002c0)) 16:25:26 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) 16:25:26 executing program 1: socketpair(0x2, 0x6, 0xfa00, &(0x7f00000002c0)) 16:25:26 executing program 3: socketpair(0x2, 0x6, 0xf901, &(0x7f00000002c0)) 16:25:26 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:26 executing program 4: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 0: socketpair(0x22, 0x3, 0x6100, &(0x7f00000002c0)) 16:25:27 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)}, 0x0) 16:25:27 executing program 1: socketpair(0x2, 0x6, 0xfa01, &(0x7f00000002c0)) 16:25:27 executing program 4: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 3: socketpair(0x2, 0x6, 0xfa00, &(0x7f00000002c0)) 16:25:27 executing program 0: socketpair(0x22, 0x3, 0x6101, &(0x7f00000002c0)) 16:25:27 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)}, 0x0) 16:25:27 executing program 1: socketpair(0x2, 0x6, 0xfb00, &(0x7f00000002c0)) 16:25:27 executing program 3: socketpair(0x2, 0x6, 0xfa01, &(0x7f00000002c0)) 16:25:27 executing program 0: socketpair(0x22, 0x3, 0x6200, &(0x7f00000002c0)) 16:25:27 executing program 4: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 5: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xffffffff, 0x0, &(0x7f0000000080)}, 0x0) 16:25:27 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 1: socketpair(0x2, 0x6, 0xfb01, &(0x7f00000002c0)) 16:25:27 executing program 3: socketpair(0x2, 0x6, 0xfb00, &(0x7f00000002c0)) 16:25:27 executing program 0: socketpair(0x22, 0x3, 0x6201, &(0x7f00000002c0)) 16:25:27 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 5: socketpair(0x2, 0x6, 0xf801, &(0x7f00000002c0)) 16:25:27 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 1: socketpair(0x2, 0x6, 0xfc00, &(0x7f00000002c0)) 16:25:27 executing program 3: socketpair(0x2, 0x6, 0xfb01, &(0x7f00000002c0)) 16:25:27 executing program 0: socketpair(0x22, 0x3, 0x6300, &(0x7f00000002c0)) 16:25:27 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 3: socketpair(0x2, 0x6, 0xfc00, &(0x7f00000002c0)) 16:25:27 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 1: socketpair(0x2, 0x6, 0xfc01, &(0x7f00000002c0)) 16:25:27 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 0: socketpair(0x22, 0x3, 0x6301, &(0x7f00000002c0)) 16:25:27 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:27 executing program 1: socketpair(0x2, 0x6, 0xfd00, &(0x7f00000002c0)) 16:25:28 executing program 2: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 0: socketpair(0x22, 0x3, 0x6400, &(0x7f00000002c0)) 16:25:28 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 3: socketpair(0x2, 0x6, 0xfc01, &(0x7f00000002c0)) 16:25:28 executing program 1: socketpair(0x2, 0x6, 0xfd01, &(0x7f00000002c0)) 16:25:28 executing program 0: socketpair(0x22, 0x3, 0x6401, &(0x7f00000002c0)) 16:25:28 executing program 2: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 3: socketpair(0x2, 0x6, 0xfd00, &(0x7f00000002c0)) 16:25:28 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 1: socketpair(0x2, 0x6, 0xfe00, &(0x7f00000002c0)) 16:25:28 executing program 0: socketpair(0x22, 0x3, 0x6500, &(0x7f00000002c0)) 16:25:28 executing program 3: socketpair(0x2, 0x6, 0xfd01, &(0x7f00000002c0)) 16:25:28 executing program 2: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 1: socketpair(0x2, 0x6, 0xfe01, &(0x7f00000002c0)) 16:25:28 executing program 3: socketpair(0x2, 0x6, 0xfe00, &(0x7f00000002c0)) 16:25:28 executing program 0: socketpair(0x22, 0x3, 0x6501, &(0x7f00000002c0)) 16:25:28 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 1: socketpair(0x2, 0x6, 0xff00, &(0x7f00000002c0)) 16:25:28 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 0: socketpair(0x22, 0x3, 0x6600, &(0x7f00000002c0)) 16:25:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 3: socketpair(0x2, 0x6, 0xfe01, &(0x7f00000002c0)) 16:25:28 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 1: socketpair(0x2, 0x6, 0xff01, &(0x7f00000002c0)) 16:25:28 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:28 executing program 0: socketpair(0x22, 0x3, 0x6601, &(0x7f00000002c0)) 16:25:28 executing program 3: socketpair(0x2, 0x6, 0xff00, &(0x7f00000002c0)) 16:25:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 1: socketpair(0x2, 0x6, 0x20000, &(0x7f00000002c0)) 16:25:29 executing program 3: socketpair(0x2, 0x6, 0xff01, &(0x7f00000002c0)) 16:25:29 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 0: socketpair(0x22, 0x3, 0x6700, &(0x7f00000002c0)) 16:25:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 1: socketpair(0x2, 0x6, 0x200000, &(0x7f00000002c0)) 16:25:29 executing program 3: socketpair(0x2, 0x6, 0x20000, &(0x7f00000002c0)) 16:25:29 executing program 0: socketpair(0x22, 0x3, 0x6701, &(0x7f00000002c0)) 16:25:29 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 1: socketpair(0x2, 0x6, 0x1000000, &(0x7f00000002c0)) 16:25:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 3: socketpair(0x2, 0x6, 0x200000, &(0x7f00000002c0)) 16:25:29 executing program 0: socketpair(0x22, 0x3, 0x6800, &(0x7f00000002c0)) 16:25:29 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 3: socketpair(0x2, 0x6, 0x1000000, &(0x7f00000002c0)) 16:25:29 executing program 1: socketpair(0x2, 0x6, 0x1010000, &(0x7f00000002c0)) 16:25:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 0: socketpair(0x22, 0x3, 0x6801, &(0x7f00000002c0)) 16:25:29 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 3: socketpair(0x2, 0x6, 0x1010000, &(0x7f00000002c0)) 16:25:29 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 1: socketpair(0x2, 0x6, 0x2000000, &(0x7f00000002c0)) 16:25:29 executing program 0: socketpair(0x22, 0x3, 0x6900, &(0x7f00000002c0)) 16:25:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 3: socketpair(0x2, 0x6, 0x2000000, &(0x7f00000002c0)) 16:25:29 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:29 executing program 1: socketpair(0x2, 0x6, 0x2010000, &(0x7f00000002c0)) 16:25:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 0: socketpair(0x22, 0x3, 0x6901, &(0x7f00000002c0)) 16:25:30 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 1: socketpair(0x2, 0x6, 0x3000000, &(0x7f00000002c0)) 16:25:30 executing program 3: socketpair(0x2, 0x6, 0x2010000, &(0x7f00000002c0)) 16:25:30 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 0: socketpair(0x22, 0x3, 0x6a00, &(0x7f00000002c0)) 16:25:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 1: socketpair(0x2, 0x6, 0x3010000, &(0x7f00000002c0)) 16:25:30 executing program 3: socketpair(0x2, 0x6, 0x3000000, &(0x7f00000002c0)) 16:25:30 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 0: socketpair(0x22, 0x3, 0x6a01, &(0x7f00000002c0)) 16:25:30 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 3: socketpair(0x2, 0x6, 0x3010000, &(0x7f00000002c0)) 16:25:30 executing program 1: socketpair(0x2, 0x6, 0x4000000, &(0x7f00000002c0)) 16:25:30 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 0: socketpair(0x22, 0x3, 0x6b00, &(0x7f00000002c0)) 16:25:30 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 3: socketpair(0x2, 0x6, 0x4000000, &(0x7f00000002c0)) 16:25:30 executing program 1: socketpair(0x2, 0x6, 0x4010000, &(0x7f00000002c0)) 16:25:30 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:30 executing program 0: socketpair(0x22, 0x3, 0x6b01, &(0x7f00000002c0)) 16:25:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 1: socketpair(0x2, 0x6, 0x5000000, &(0x7f00000002c0)) 16:25:30 executing program 3: socketpair(0x2, 0x6, 0x4010000, &(0x7f00000002c0)) 16:25:30 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:30 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:30 executing program 0: socketpair(0x22, 0x3, 0x6c00, &(0x7f00000002c0)) 16:25:31 executing program 3: socketpair(0x2, 0x6, 0x5000000, &(0x7f00000002c0)) 16:25:31 executing program 1: socketpair(0x2, 0x6, 0x5010000, &(0x7f00000002c0)) 16:25:31 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:31 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:31 executing program 0: socketpair(0x22, 0x3, 0x6c01, &(0x7f00000002c0)) 16:25:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:31 executing program 1: socketpair(0x2, 0x6, 0x6000000, &(0x7f00000002c0)) 16:25:31 executing program 3: socketpair(0x2, 0x6, 0x5010000, &(0x7f00000002c0)) 16:25:31 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:31 executing program 0: socketpair(0x22, 0x3, 0x6d00, &(0x7f00000002c0)) 16:25:31 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:31 executing program 1: socketpair(0x2, 0x6, 0x6010000, &(0x7f00000002c0)) 16:25:31 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:31 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:31 executing program 3: socketpair(0x2, 0x6, 0x6000000, &(0x7f00000002c0)) 16:25:31 executing program 0: socketpair(0x22, 0x3, 0x6d01, &(0x7f00000002c0)) 16:25:31 executing program 1: socketpair(0x2, 0x6, 0x7000000, &(0x7f00000002c0)) 16:25:31 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:31 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:31 executing program 3: socketpair(0x2, 0x6, 0x6010000, &(0x7f00000002c0)) 16:25:31 executing program 0: socketpair(0x22, 0x3, 0x6e00, &(0x7f00000002c0)) 16:25:31 executing program 1: socketpair(0x2, 0x6, 0x7010000, &(0x7f00000002c0)) 16:25:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:31 executing program 0: socketpair(0x22, 0x3, 0x6e01, &(0x7f00000002c0)) 16:25:31 executing program 3: socketpair(0x2, 0x6, 0x7000000, &(0x7f00000002c0)) 16:25:31 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:31 executing program 1: socketpair(0x2, 0x6, 0x8000000, &(0x7f00000002c0)) 16:25:31 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 0: socketpair(0x22, 0x3, 0x6f00, &(0x7f00000002c0)) 16:25:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:32 executing program 3: socketpair(0x2, 0x6, 0x7010000, &(0x7f00000002c0)) 16:25:32 executing program 1: socketpair(0x2, 0x6, 0x8010000, &(0x7f00000002c0)) 16:25:32 executing program 0: socketpair(0x22, 0x3, 0x6f01, &(0x7f00000002c0)) 16:25:32 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 3: socketpair(0x2, 0x6, 0x8000000, &(0x7f00000002c0)) 16:25:32 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:32 executing program 1: socketpair(0x2, 0x6, 0x9000000, &(0x7f00000002c0)) 16:25:32 executing program 0: socketpair(0x22, 0x3, 0x7000, &(0x7f00000002c0)) 16:25:32 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:32 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 3: socketpair(0x2, 0x6, 0x8010000, &(0x7f00000002c0)) [ 2344.441246][ T3245] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.447648][ T3245] ieee802154 phy1 wpan1: encryption failed: -22 16:25:32 executing program 1: socketpair(0x2, 0x6, 0x9010000, &(0x7f00000002c0)) 16:25:32 executing program 0: socketpair(0x22, 0x3, 0x7001, &(0x7f00000002c0)) 16:25:32 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:32 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 3: socketpair(0x2, 0x6, 0x9000000, &(0x7f00000002c0)) 16:25:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 1: socketpair(0x2, 0x6, 0xa000000, &(0x7f00000002c0)) 16:25:32 executing program 0: socketpair(0x22, 0x3, 0x7100, &(0x7f00000002c0)) 16:25:32 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 3: socketpair(0x2, 0x6, 0x9010000, &(0x7f00000002c0)) 16:25:32 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:32 executing program 1: socketpair(0x2, 0x6, 0xa010000, &(0x7f00000002c0)) 16:25:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 5: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:32 executing program 0: socketpair(0x22, 0x3, 0x7101, &(0x7f00000002c0)) 16:25:33 executing program 3: socketpair(0x2, 0x6, 0xa000000, &(0x7f00000002c0)) 16:25:33 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 1: socketpair(0x2, 0x6, 0xb000000, &(0x7f00000002c0)) 16:25:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 5: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 0: socketpair(0x22, 0x3, 0x7200, &(0x7f00000002c0)) 16:25:33 executing program 3: socketpair(0x2, 0x6, 0xa010000, &(0x7f00000002c0)) 16:25:33 executing program 2: socketpair(0x2, 0x6, 0xa000000, &(0x7f00000002c0)) 16:25:33 executing program 1: socketpair(0x2, 0x6, 0xb010000, &(0x7f00000002c0)) 16:25:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 0: socketpair(0x22, 0x3, 0x7201, &(0x7f00000002c0)) 16:25:33 executing program 5: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 1: socketpair(0x2, 0x6, 0xc000000, &(0x7f00000002c0)) 16:25:33 executing program 3: socketpair(0x2, 0x6, 0xb000000, &(0x7f00000002c0)) 16:25:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 0: socketpair(0x22, 0x3, 0x7300, &(0x7f00000002c0)) 16:25:33 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 3: socketpair(0x2, 0x6, 0xb010000, &(0x7f00000002c0)) 16:25:33 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 1: socketpair(0x2, 0x6, 0xc010000, &(0x7f00000002c0)) 16:25:33 executing program 0: socketpair(0x22, 0x3, 0x7301, &(0x7f00000002c0)) 16:25:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 3: socketpair(0x2, 0x6, 0xc000000, &(0x7f00000002c0)) 16:25:33 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:33 executing program 1: socketpair(0x2, 0x6, 0xd000000, &(0x7f00000002c0)) 16:25:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 0: socketpair(0x22, 0x3, 0x7400, &(0x7f00000002c0)) 16:25:33 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:33 executing program 3: socketpair(0x2, 0x6, 0xc010000, &(0x7f00000002c0)) 16:25:34 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 2: socketpair(0x2, 0x6, 0x3000000, &(0x7f00000002c0)) 16:25:34 executing program 0: socketpair(0x22, 0x3, 0x7401, &(0x7f00000002c0)) 16:25:34 executing program 1: socketpair(0x2, 0x6, 0xd010000, &(0x7f00000002c0)) 16:25:34 executing program 3: socketpair(0x2, 0x6, 0xd000000, &(0x7f00000002c0)) 16:25:34 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 1: socketpair(0x2, 0x6, 0xe000000, &(0x7f00000002c0)) 16:25:34 executing program 0: socketpair(0x22, 0x3, 0x7500, &(0x7f00000002c0)) 16:25:34 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 3: socketpair(0x2, 0x6, 0xd010000, &(0x7f00000002c0)) 16:25:34 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 0: socketpair(0x22, 0x3, 0x7501, &(0x7f00000002c0)) 16:25:34 executing program 1: socketpair(0x2, 0x6, 0xe010000, &(0x7f00000002c0)) 16:25:34 executing program 3: socketpair(0x2, 0x6, 0xe000000, &(0x7f00000002c0)) 16:25:34 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 0: socketpair(0x22, 0x3, 0x7600, &(0x7f00000002c0)) 16:25:34 executing program 1: socketpair(0x2, 0x6, 0xf000000, &(0x7f00000002c0)) 16:25:34 executing program 3: socketpair(0x2, 0x6, 0xe010000, &(0x7f00000002c0)) 16:25:34 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 0: socketpair(0x22, 0x3, 0x7601, &(0x7f00000002c0)) 16:25:34 executing program 3: socketpair(0x2, 0x6, 0xf000000, &(0x7f00000002c0)) 16:25:34 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 1: socketpair(0x2, 0x6, 0xf010000, &(0x7f00000002c0)) 16:25:34 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:34 executing program 0: socketpair(0x22, 0x3, 0x7700, &(0x7f00000002c0)) 16:25:34 executing program 3: socketpair(0x2, 0x6, 0xf010000, &(0x7f00000002c0)) 16:25:34 executing program 1: socketpair(0x2, 0x6, 0x10000000, &(0x7f00000002c0)) 16:25:34 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 4: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 0: socketpair(0x22, 0x3, 0x7701, &(0x7f00000002c0)) 16:25:35 executing program 3: socketpair(0x2, 0x6, 0x10000000, &(0x7f00000002c0)) 16:25:35 executing program 1: socketpair(0x2, 0x6, 0x10010000, &(0x7f00000002c0)) 16:25:35 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 4: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 3: socketpair(0x2, 0x6, 0x10010000, &(0x7f00000002c0)) 16:25:35 executing program 0: socketpair(0x22, 0x3, 0x7800, &(0x7f00000002c0)) 16:25:35 executing program 1: socketpair(0x2, 0x6, 0x11000000, &(0x7f00000002c0)) 16:25:35 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 4: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 1: socketpair(0x2, 0x6, 0x11010000, &(0x7f00000002c0)) 16:25:35 executing program 3: socketpair(0x2, 0x6, 0x11000000, &(0x7f00000002c0)) 16:25:35 executing program 0: socketpair(0x22, 0x3, 0x7801, &(0x7f00000002c0)) 16:25:35 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 1: socketpair(0x2, 0x6, 0x12000000, &(0x7f00000002c0)) 16:25:35 executing program 0: socketpair(0x22, 0x3, 0x7900, &(0x7f00000002c0)) 16:25:35 executing program 3: socketpair(0x2, 0x6, 0x11010000, &(0x7f00000002c0)) 16:25:35 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 0: socketpair(0x22, 0x3, 0x7901, &(0x7f00000002c0)) 16:25:35 executing program 1: socketpair(0x2, 0x6, 0x12010000, &(0x7f00000002c0)) 16:25:35 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 3: socketpair(0x2, 0x6, 0x12000000, &(0x7f00000002c0)) 16:25:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:35 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 0: socketpair(0x22, 0x3, 0x7a00, &(0x7f00000002c0)) 16:25:36 executing program 1: socketpair(0x2, 0x6, 0x13000000, &(0x7f00000002c0)) 16:25:36 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 3: socketpair(0x2, 0x6, 0x12010000, &(0x7f00000002c0)) 16:25:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 0: socketpair(0x22, 0x3, 0x7a01, &(0x7f00000002c0)) 16:25:36 executing program 1: socketpair(0x2, 0x6, 0x13010000, &(0x7f00000002c0)) 16:25:36 executing program 3: socketpair(0x2, 0x6, 0x13000000, &(0x7f00000002c0)) 16:25:36 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 0: socketpair(0x22, 0x3, 0x7b00, &(0x7f00000002c0)) 16:25:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 3: socketpair(0x2, 0x6, 0x13010000, &(0x7f00000002c0)) 16:25:36 executing program 1: socketpair(0x2, 0x6, 0x14000000, &(0x7f00000002c0)) 16:25:36 executing program 0: socketpair(0x22, 0x3, 0x7b01, &(0x7f00000002c0)) 16:25:36 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 3: socketpair(0x2, 0x6, 0x14000000, &(0x7f00000002c0)) 16:25:36 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:36 executing program 1: socketpair(0x2, 0x6, 0x14010000, &(0x7f00000002c0)) 16:25:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 0: socketpair(0x22, 0x3, 0x7c00, &(0x7f00000002c0)) 16:25:36 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 3: socketpair(0x2, 0x6, 0x14010000, &(0x7f00000002c0)) 16:25:36 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:36 executing program 1: socketpair(0x2, 0x6, 0x15000000, &(0x7f00000002c0)) 16:25:36 executing program 0: socketpair(0x22, 0x3, 0x7c01, &(0x7f00000002c0)) 16:25:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:36 executing program 3: socketpair(0x2, 0x6, 0x15000000, &(0x7f00000002c0)) 16:25:37 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:37 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:37 executing program 1: socketpair(0x2, 0x6, 0x15010000, &(0x7f00000002c0)) 16:25:37 executing program 3: socketpair(0x2, 0x6, 0x15010000, &(0x7f00000002c0)) 16:25:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:37 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:37 executing program 1: socketpair(0x2, 0x6, 0x16000000, &(0x7f00000002c0)) 16:25:37 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:37 executing program 0: socketpair(0x22, 0x3, 0x7d00, &(0x7f00000002c0)) 16:25:37 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:37 executing program 3: socketpair(0x2, 0x6, 0x16000000, &(0x7f00000002c0)) 16:25:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:37 executing program 1: socketpair(0x2, 0x6, 0x16010000, &(0x7f00000002c0)) 16:25:37 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:37 executing program 0: socketpair(0x22, 0x3, 0x7d01, &(0x7f00000002c0)) 16:25:37 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:37 executing program 3: socketpair(0x2, 0x6, 0x16010000, &(0x7f00000002c0)) 16:25:37 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:37 executing program 1: socketpair(0x2, 0x6, 0x17000000, &(0x7f00000002c0)) 16:25:37 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:37 executing program 0: socketpair(0x22, 0x3, 0x7e00, &(0x7f00000002c0)) 16:25:37 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:37 executing program 3: socketpair(0x2, 0x6, 0x17000000, &(0x7f00000002c0)) 16:25:37 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:37 executing program 1: socketpair(0x2, 0x6, 0x17010000, &(0x7f00000002c0)) 16:25:37 executing program 0: socketpair(0x22, 0x3, 0x7e01, &(0x7f00000002c0)) 16:25:37 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:37 executing program 3: socketpair(0x2, 0x6, 0x17010000, &(0x7f00000002c0)) 16:25:37 executing program 1: socketpair(0x2, 0x6, 0x18000000, &(0x7f00000002c0)) 16:25:37 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:37 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 0: socketpair(0x22, 0x3, 0x7f00, &(0x7f00000002c0)) 16:25:38 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 1: socketpair(0x2, 0x6, 0x18010000, &(0x7f00000002c0)) 16:25:38 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 3: socketpair(0x2, 0x6, 0x18000000, &(0x7f00000002c0)) 16:25:38 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 0: socketpair(0x22, 0x3, 0x7f01, &(0x7f00000002c0)) 16:25:38 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 1: socketpair(0x2, 0x6, 0x19000000, &(0x7f00000002c0)) 16:25:38 executing program 3: socketpair(0x2, 0x6, 0x18010000, &(0x7f00000002c0)) 16:25:38 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 0: socketpair(0x22, 0x3, 0x8100, &(0x7f00000002c0)) 16:25:38 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 3: socketpair(0x2, 0x6, 0x19000000, &(0x7f00000002c0)) 16:25:38 executing program 1: socketpair(0x2, 0x6, 0x19010000, &(0x7f00000002c0)) 16:25:38 executing program 2: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:38 executing program 0: socketpair(0x22, 0x3, 0x8101, &(0x7f00000002c0)) 16:25:38 executing program 2: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 5: socketpair(0x22, 0x3, 0x8100, &(0x7f00000002c0)) 16:25:38 executing program 3: socketpair(0x2, 0x6, 0x19010000, &(0x7f00000002c0)) 16:25:38 executing program 1: socketpair(0x2, 0x6, 0x1a000000, &(0x7f00000002c0)) 16:25:38 executing program 0: socketpair(0x22, 0x3, 0x8200, &(0x7f00000002c0)) 16:25:38 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:38 executing program 2: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 5: syz_io_uring_setup(0x7, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:38 executing program 3: socketpair(0x2, 0x6, 0x1a000000, &(0x7f00000002c0)) 16:25:38 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:38 executing program 1: socketpair(0x2, 0x6, 0x1a010000, &(0x7f00000002c0)) 16:25:38 executing program 0: socketpair(0x22, 0x3, 0x8201, &(0x7f00000002c0)) 16:25:38 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:39 executing program 5: socketpair(0x22, 0x3, 0x5801, &(0x7f00000002c0)) 16:25:39 executing program 3: socketpair(0x2, 0x6, 0x1a010000, &(0x7f00000002c0)) 16:25:39 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:39 executing program 1: socketpair(0x2, 0x6, 0x1b000000, &(0x7f00000002c0)) 16:25:39 executing program 0: socketpair(0x22, 0x3, 0x8300, &(0x7f00000002c0)) 16:25:39 executing program 3: socketpair(0x2, 0x6, 0x1b000000, &(0x7f00000002c0)) 16:25:39 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:39 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:39 executing program 0: socketpair(0x22, 0x3, 0x8301, &(0x7f00000002c0)) 16:25:39 executing program 1: socketpair(0x2, 0x6, 0x1b010000, &(0x7f00000002c0)) 16:25:39 executing program 4: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:39 executing program 3: socketpair(0x2, 0x6, 0x1b010000, &(0x7f00000002c0)) 16:25:39 executing program 1: socketpair(0x2, 0x6, 0x1c000000, &(0x7f00000002c0)) 16:25:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:39 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:39 executing program 0: socketpair(0x22, 0x3, 0x8400, &(0x7f00000002c0)) 16:25:39 executing program 3: socketpair(0x2, 0x6, 0x1c000000, &(0x7f00000002c0)) 16:25:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) 16:25:39 executing program 1: socketpair(0x2, 0x6, 0x1c010000, &(0x7f00000002c0)) 16:25:39 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:39 executing program 5: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:39 executing program 3: socketpair(0x2, 0x6, 0x1c010000, &(0x7f00000002c0)) 16:25:39 executing program 0: socketpair(0x22, 0x3, 0x8401, &(0x7f00000002c0)) 16:25:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) 16:25:39 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:39 executing program 1: socketpair(0x2, 0x6, 0x1d000000, &(0x7f00000002c0)) 16:25:39 executing program 3: socketpair(0x2, 0x6, 0x1d000000, &(0x7f00000002c0)) 16:25:39 executing program 0: socketpair(0x22, 0x3, 0x8500, &(0x7f00000002c0)) 16:25:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)) socket(0x2a, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) 16:25:39 executing program 1: socketpair(0x2, 0x6, 0x1d010000, &(0x7f00000002c0)) 16:25:40 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:40 executing program 4: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/245, 0xf5) 16:25:40 executing program 0: socketpair(0x22, 0x3, 0x8501, &(0x7f00000002c0)) 16:25:40 executing program 3: socketpair(0x2, 0x6, 0x1d010000, &(0x7f00000002c0)) 16:25:40 executing program 5: socketpair(0x22, 0x3, 0x8500, &(0x7f00000002c0)) 16:25:40 executing program 1: socketpair(0x2, 0x6, 0x1e000000, &(0x7f00000002c0)) 16:25:40 executing program 0: socketpair(0x22, 0x3, 0x8600, &(0x7f00000002c0)) 16:25:40 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:40 executing program 4: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x800) read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/245, 0xf5) 16:25:40 executing program 3: socketpair(0x2, 0x6, 0x1e000000, &(0x7f00000002c0)) 16:25:40 executing program 5: socketpair(0x2, 0x6, 0x1d010000, &(0x7f00000002c0)) 16:25:40 executing program 0: socketpair(0x22, 0x3, 0x8601, &(0x7f00000002c0)) 16:25:40 executing program 1: socketpair(0x2, 0x6, 0x1e010000, &(0x7f00000002c0)) 16:25:40 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:40 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000080)=""/245, 0xf5) 16:25:40 executing program 3: socketpair(0x2, 0x6, 0x1e010000, &(0x7f00000002c0)) 16:25:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x700}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xa9d9, 0x0, 0x0, 0x33c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fc3, &(0x7f0000000180)={0x0, 0xcad5, 0x2, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) socket(0x2a, 0x3, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000000c0), 0x4) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x114, 0x0, 0x0, 0x4) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x6, 0x131071, r3, 0x10000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r9, 0x8000, 0x0, 0x38c, 0x5, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="0cb4b4f046138af4dbe25a49f85e84b82f6a55447e1e241ab7ab61624039bc3f64e3ade987adbed77f3888a79f0f028e4f944619fe75e69f3ce1ffc509ce4c028406182b2ea08b22ed202814191a2b146124f29c2881e6b7f2d76c67d7614d08f0ceab1227a53df2af07825232b7fd1a251000b8c7ee2456c00aa73134bb3cf36c2dc14911f887", 0x87, 0x0, 0x0, {0x0, r6}}, 0x1ff) 16:25:40 executing program 1: socketpair(0x2, 0x6, 0x1f000000, &(0x7f00000002c0)) 16:25:40 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xcd72, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:40 executing program 0: socketpair(0x22, 0x3, 0x8700, &(0x7f00000002c0)) 16:25:40 executing program 3: socketpair(0x2, 0x6, 0x1f000000, &(0x7f00000002c0)) 16:25:40 executing program 4: socketpair(0x2, 0x6, 0x1e010000, &(0x7f00000002c0)) 16:25:40 executing program 1: socketpair(0x2, 0x6, 0x1f010000, &(0x7f00000002c0)) 16:25:40 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:40 executing program 0: socketpair(0x22, 0x3, 0x8701, &(0x7f00000002c0)) 16:25:40 executing program 3: socketpair(0x2, 0x6, 0x1f010000, &(0x7f00000002c0)) 16:25:41 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000006d00)={{0x0, 0xc, 0x0, 0x5, 0x0, 0x1, 0x101, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140)=r3, 0x1) 16:25:41 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000006d00)={{0x0, 0xc, 0x0, 0x5, 0x0, 0x1, 0x101, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140)=r3, 0x1) 16:25:41 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:41 executing program 1: socketpair(0x2, 0x6, 0x20000000, &(0x7f00000002c0)) 16:25:41 executing program 0: socketpair(0x22, 0x3, 0x8800, &(0x7f00000002c0)) 16:25:41 executing program 3: socketpair(0x2, 0x6, 0x20000000, &(0x7f00000002c0)) 16:25:41 executing program 3: socketpair(0x2, 0x6, 0x20010000, &(0x7f00000002c0)) 16:25:41 executing program 1: socketpair(0x2, 0x6, 0x20010000, &(0x7f00000002c0)) 16:25:41 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:41 executing program 0: socketpair(0x22, 0x3, 0x8801, &(0x7f00000002c0)) 16:25:41 executing program 3: socketpair(0x2, 0x6, 0x21000000, &(0x7f00000002c0)) 16:25:41 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x7000000) 16:25:41 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000006d00)={{0x0, 0xc, 0x0, 0x5, 0x0, 0x1, 0x101, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140)=r3, 0x1) 16:25:41 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x132}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:41 executing program 1: socketpair(0x2, 0x6, 0x21000000, &(0x7f00000002c0)) 16:25:41 executing program 0: socketpair(0x22, 0x3, 0x8900, &(0x7f00000002c0)) 16:25:41 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x2000000) 16:25:41 executing program 3: socketpair(0x2, 0x6, 0x21010000, &(0x7f00000002c0)) 16:25:41 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000006d00)={{0x0, 0xc, 0x0, 0x5, 0x0, 0x1, 0x101, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140)=r3, 0x1) 16:25:41 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:41 executing program 0: socketpair(0x22, 0x3, 0x8901, &(0x7f00000002c0)) 16:25:41 executing program 1: socketpair(0x2, 0x6, 0x21010000, &(0x7f00000002c0)) 16:25:41 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x6) 16:25:41 executing program 3: socketpair(0x2, 0x6, 0x22000000, &(0x7f00000002c0)) 16:25:41 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:42 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000006d00)={{0x0, 0xc, 0x0, 0x5, 0x0, 0x1, 0x101, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) 16:25:42 executing program 1: socketpair(0x2, 0x6, 0x22000000, &(0x7f00000002c0)) 16:25:42 executing program 0: socketpair(0x22, 0x3, 0x8a00, &(0x7f00000002c0)) 16:25:42 executing program 3: socketpair(0x2, 0x6, 0x22010000, &(0x7f00000002c0)) 16:25:42 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x6408, 0x0) 16:25:42 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:42 executing program 0: socketpair(0x22, 0x3, 0x8a01, &(0x7f00000002c0)) 16:25:42 executing program 1: socketpair(0x2, 0x6, 0x22010000, &(0x7f00000002c0)) 16:25:42 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) eventfd2(0x0, 0x0) 16:25:42 executing program 3: socketpair(0x2, 0x6, 0x23000000, &(0x7f00000002c0)) 16:25:42 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x460301, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000000c0), 0x4) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) 16:25:42 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 16:25:42 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 16:25:42 executing program 0: socketpair(0x22, 0x3, 0x8b00, &(0x7f00000002c0)) 16:25:42 executing program 1: socketpair(0x2, 0x6, 0x23000000, &(0x7f00000002c0)) 16:25:42 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) eventfd2(0x0, 0x0) 16:25:42 executing program 3: socketpair(0x2, 0x6, 0x23010000, &(0x7f00000002c0)) 16:25:42 executing program 0: socketpair(0x22, 0x3, 0x8b01, &(0x7f00000002c0)) 16:25:42 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:42 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:42 executing program 1: socketpair(0x2, 0x6, 0x23010000, &(0x7f00000002c0)) 16:25:42 executing program 3: socketpair(0x2, 0x6, 0x24000000, &(0x7f00000002c0)) 16:25:42 executing program 4: msgsnd(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300006a785037534381cb8fb1807dae08e848f5dabd8ad344b76a9e9f56c042579b5aec172a0489"], 0x30, 0x800) socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000540)=0x1, 0x4) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)="bf60d7ece0a873cabc9adc514098ce3c57443394e4bcfe48e670462052be62056858750b1730dbacd0620dcc01ebb1fc1e80bd5ca397c5e0", 0x38, 0x41, 0x1}, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000040)=@caif=@util, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/242, 0xf2}], 0x3, &(0x7f0000000400)=""/42, 0x2a}, 0x100) 16:25:42 executing program 0: socketpair(0x22, 0x3, 0x8c00, &(0x7f00000002c0)) 16:25:42 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:42 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 16:25:42 executing program 1: socketpair(0x2, 0x6, 0x24000000, &(0x7f00000002c0)) 16:25:42 executing program 3: socketpair(0x2, 0x6, 0x24010000, &(0x7f00000002c0)) 16:25:42 executing program 2: syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:25:42 executing program 0: socketpair(0x22, 0x3, 0x8c01, &(0x7f00000002c0)) 16:25:42 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) 16:25:42 executing program 3: socketpair(0x2, 0x6, 0x25000000, &(0x7f00000002c0)) 16:25:42 executing program 1: socketpair(0x2, 0x6, 0x24010000, &(0x7f00000002c0)) 16:25:43 executing program 0: socketpair(0x22, 0x3, 0x8d00, &(0x7f00000002c0)) 16:25:43 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) 16:25:43 executing program 2: msgsnd(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300006a785037534381cb8fb1807dae08e848f5dabd8ad344b76a9e9f56c042579b5aec172a0489"], 0x30, 0x800) socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000540)=0x1, 0x4) syz_io_uring_setup(0x1934, &(0x7f0000000180)={0x0, 0x7172, 0x2, 0x3, 0x19f, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x5, 0x2}}) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x20002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)="bf60d7ece0a873cabc9adc514098ce3c57443394e4bcfe48e670462052be62056858750b1730dbacd0620dcc01ebb1fc1e80bd5ca397c5e0", 0x38, 0x41, 0x1}, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41) recvmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000040)=@caif=@util, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/242, 0xf2}], 0x3, &(0x7f0000000400)=""/42, 0x2a}, 0x100) 16:25:43 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000380)=0x1, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) 16:25:43 executing program 1: socketpair(0x2, 0x6, 0x25000000, &(0x7f00000002c0)) 16:25:43 executing program 3: socketpair(0x2, 0x6, 0x25010000, &(0x7f00000002c0)) 16:25:43 executing program 0: socketpair(0x22, 0x3, 0x8d01, &(0x7f00000002c0)) 16:25:43 executing program 1: socketpair(0x2, 0x6, 0x25010000, &(0x7f00000002c0)) 16:25:43 executing program 3: socketpair(0x2, 0x6, 0x26000000, &(0x7f00000002c0)) 16:25:43 executing program 0: socketpair(0x22, 0x3, 0x8e00, &(0x7f00000002c0)) 16:25:43 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) 16:25:43 executing program 4 (fault-call:1 fault-nth:0): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:43 executing program 1: socketpair(0x2, 0x6, 0x26000000, &(0x7f00000002c0)) 16:25:43 executing program 3: socketpair(0x2, 0x6, 0x26010000, &(0x7f00000002c0)) [ 2355.938330][T25904] FAULT_INJECTION: forcing a failure. [ 2355.938330][T25904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2355.963000][T25904] CPU: 1 PID: 25904 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 2355.971483][T25904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2355.981554][T25904] Call Trace: [ 2355.984931][T25904] dump_stack+0x141/0x1d7 [ 2355.989312][T25904] should_fail.cold+0x5/0xa [ 2355.993874][T25904] _copy_from_user+0x2c/0x180 [ 2355.998594][T25904] io_uring_setup+0x91/0x2a80 [ 2356.004182][T25904] ? __context_tracking_exit+0xb8/0xe0 [ 2356.009671][T25904] ? io_connect+0x680/0x680 [ 2356.014196][T25904] ? lock_downgrade+0x6e0/0x6e0 [ 2356.019107][T25904] ? syscall_enter_from_user_mode+0x27/0x70 [ 2356.025066][T25904] do_syscall_64+0x3a/0xb0 [ 2356.029507][T25904] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2356.035448][T25904] RIP: 0033:0x4665f9 [ 2356.039363][T25904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.058999][T25904] RSP: 002b:00007f9f2ac32108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2356.067451][T25904] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2356.075414][T25904] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2356.083386][T25904] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2356.091351][T25904] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2356.099314][T25904] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 16:25:44 executing program 2 (fault-call:1 fault-nth:0): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:44 executing program 3: socketpair(0x2, 0x6, 0x27000000, &(0x7f00000002c0)) 16:25:44 executing program 0: socketpair(0x22, 0x3, 0x8e01, &(0x7f00000002c0)) 16:25:44 executing program 1: socketpair(0x2, 0x6, 0x26010000, &(0x7f00000002c0)) 16:25:44 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) 16:25:44 executing program 4 (fault-call:1 fault-nth:1): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:44 executing program 1: socketpair(0x2, 0x6, 0x27000000, &(0x7f00000002c0)) 16:25:44 executing program 3: socketpair(0x2, 0x6, 0x27010000, &(0x7f00000002c0)) [ 2356.659342][T25919] FAULT_INJECTION: forcing a failure. [ 2356.659342][T25919] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.659667][T25920] FAULT_INJECTION: forcing a failure. [ 2356.659667][T25920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2356.721373][T25920] CPU: 1 PID: 25920 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2356.729855][T25920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2356.739937][T25920] Call Trace: [ 2356.743229][T25920] dump_stack+0x141/0x1d7 [ 2356.747592][T25920] should_fail.cold+0x5/0xa [ 2356.752124][T25920] _copy_from_user+0x2c/0x180 [ 2356.756821][T25920] io_uring_setup+0x91/0x2a80 [ 2356.761514][T25920] ? __context_tracking_exit+0xb8/0xe0 [ 2356.766994][T25920] ? io_connect+0x680/0x680 [ 2356.771536][T25920] ? lock_downgrade+0x6e0/0x6e0 [ 2356.776417][T25920] ? syscall_enter_from_user_mode+0x27/0x70 [ 2356.782335][T25920] do_syscall_64+0x3a/0xb0 [ 2356.786765][T25920] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2356.792741][T25920] RIP: 0033:0x4665f9 [ 2356.796651][T25920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:25:44 executing program 0: socketpair(0x22, 0x3, 0x8f00, &(0x7f00000002c0)) 16:25:44 executing program 5: openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) [ 2356.816365][T25920] RSP: 002b:00007f003d55d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2356.824808][T25920] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2356.832810][T25920] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2356.843832][T25920] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2356.851822][T25920] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2356.859804][T25920] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 16:25:44 executing program 1: socketpair(0x2, 0x6, 0x27010000, &(0x7f00000002c0)) [ 2356.867898][T25919] CPU: 0 PID: 25919 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 2356.876347][T25919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2356.886416][T25919] Call Trace: [ 2356.889705][T25919] dump_stack+0x141/0x1d7 [ 2356.894067][T25919] should_fail.cold+0x5/0xa [ 2356.898623][T25919] ? io_uring_setup+0x27d/0x2a80 [ 2356.903582][T25919] should_failslab+0x5/0x10 [ 2356.908112][T25919] kmem_cache_alloc_trace+0x55/0x290 [ 2356.913450][T25919] io_uring_setup+0x27d/0x2a80 16:25:44 executing program 2 (fault-call:1 fault-nth:1): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 2356.918240][T25919] ? __context_tracking_exit+0xb8/0xe0 [ 2356.923731][T25919] ? io_connect+0x680/0x680 [ 2356.928303][T25919] ? syscall_enter_from_user_mode+0x27/0x70 [ 2356.934242][T25919] do_syscall_64+0x3a/0xb0 [ 2356.938678][T25919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2356.944608][T25919] RIP: 0033:0x4665f9 [ 2356.948542][T25919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.968729][T25919] RSP: 002b:00007f9f2ac32108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2356.977162][T25919] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2356.985512][T25919] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2356.993496][T25919] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2357.001487][T25919] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2357.009647][T25919] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 [ 2357.016878][T25928] FAULT_INJECTION: forcing a failure. [ 2357.016878][T25928] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.063777][T25928] CPU: 1 PID: 25928 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2357.072259][T25928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2357.082352][T25928] Call Trace: [ 2357.085677][T25928] dump_stack+0x141/0x1d7 [ 2357.090153][T25928] should_fail.cold+0x5/0xa [ 2357.094695][T25928] ? io_uring_setup+0x27d/0x2a80 [ 2357.099657][T25928] should_failslab+0x5/0x10 [ 2357.104210][T25928] kmem_cache_alloc_trace+0x55/0x290 [ 2357.109522][T25928] io_uring_setup+0x27d/0x2a80 [ 2357.114340][T25928] ? __context_tracking_exit+0xb8/0xe0 [ 2357.119829][T25928] ? io_connect+0x680/0x680 [ 2357.124379][T25928] ? syscall_enter_from_user_mode+0x27/0x70 [ 2357.130319][T25928] do_syscall_64+0x3a/0xb0 [ 2357.134770][T25928] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2357.141738][T25928] RIP: 0033:0x4665f9 16:25:45 executing program 3: socketpair(0x2, 0x6, 0x28000000, &(0x7f00000002c0)) 16:25:45 executing program 3: socketpair(0x2, 0x6, 0x28010000, &(0x7f00000002c0)) 16:25:45 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x500, 0x60, 0x19}, 0x18) 16:25:45 executing program 1: socketpair(0x2, 0x6, 0x28000000, &(0x7f00000002c0)) 16:25:45 executing program 3: socketpair(0x2, 0x6, 0x29000000, &(0x7f00000002c0)) [ 2357.145654][T25928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2357.165309][T25928] RSP: 002b:00007f003d55d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2357.174550][T25928] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2357.182534][T25928] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2357.190521][T25928] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2357.198506][T25928] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2357.206486][T25928] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 16:25:45 executing program 4 (fault-call:1 fault-nth:2): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:45 executing program 1: socketpair(0x2, 0x6, 0x28010000, &(0x7f00000002c0)) 16:25:45 executing program 0: socketpair(0x22, 0x3, 0x8f01, &(0x7f00000002c0)) 16:25:45 executing program 3: socketpair(0x2, 0x6, 0x29010000, &(0x7f00000002c0)) 16:25:45 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:25:45 executing program 2 (fault-call:1 fault-nth:2): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:45 executing program 1: socketpair(0x2, 0x6, 0x29000000, &(0x7f00000002c0)) 16:25:45 executing program 0: socketpair(0x22, 0x3, 0x9000, &(0x7f00000002c0)) [ 2357.501003][T25949] FAULT_INJECTION: forcing a failure. [ 2357.501003][T25949] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.534922][T25954] FAULT_INJECTION: forcing a failure. [ 2357.534922][T25954] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.555221][T25949] CPU: 1 PID: 25949 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 2357.563782][T25949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2357.573876][T25949] Call Trace: [ 2357.577170][T25949] dump_stack+0x141/0x1d7 [ 2357.581702][T25949] should_fail.cold+0x5/0xa [ 2357.586271][T25949] ? io_uring_setup+0x37e/0x2a80 [ 2357.591235][T25949] should_failslab+0x5/0x10 [ 2357.595783][T25949] __kmalloc+0x72/0x300 [ 2357.599982][T25949] io_uring_setup+0x37e/0x2a80 [ 2357.604774][T25949] ? __context_tracking_exit+0xb8/0xe0 [ 2357.610298][T25949] ? io_connect+0x680/0x680 [ 2357.614843][T25949] ? syscall_enter_from_user_mode+0x27/0x70 [ 2357.620858][T25949] do_syscall_64+0x3a/0xb0 [ 2357.625308][T25949] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2357.631239][T25949] RIP: 0033:0x4665f9 [ 2357.635273][T25949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:25:45 executing program 3: socketpair(0x2, 0x6, 0x2a000000, &(0x7f00000002c0)) 16:25:45 executing program 0: socketpair(0x22, 0x3, 0x9001, &(0x7f00000002c0)) [ 2357.654924][T25949] RSP: 002b:00007f9f2ac32108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2357.663709][T25949] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2357.671811][T25949] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2357.679895][T25949] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2357.687969][T25949] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2357.695951][T25949] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 16:25:45 executing program 1: socketpair(0x2, 0x6, 0x29010000, &(0x7f00000002c0)) 16:25:45 executing program 1: socketpair(0x2, 0x6, 0x2a000000, &(0x7f00000002c0)) [ 2357.717372][T25954] CPU: 0 PID: 25954 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2357.725856][T25954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2357.745652][T25954] Call Trace: [ 2357.748954][T25954] dump_stack+0x141/0x1d7 [ 2357.753581][T25954] should_fail.cold+0x5/0xa [ 2357.758198][T25954] ? io_uring_setup+0x37e/0x2a80 [ 2357.763416][T25954] should_failslab+0x5/0x10 [ 2357.767942][T25954] __kmalloc+0x72/0x300 [ 2357.772123][T25954] io_uring_setup+0x37e/0x2a80 [ 2357.776910][T25954] ? __context_tracking_exit+0xb8/0xe0 [ 2357.782484][T25954] ? io_connect+0x680/0x680 [ 2357.787020][T25954] ? syscall_enter_from_user_mode+0x27/0x70 [ 2357.792961][T25954] do_syscall_64+0x3a/0xb0 [ 2357.797663][T25954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2357.803600][T25954] RIP: 0033:0x4665f9 [ 2357.807540][T25954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2357.827171][T25954] RSP: 002b:00007f003d55d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2357.835625][T25954] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2357.843619][T25954] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2357.851619][T25954] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2357.859612][T25954] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2357.869079][T25954] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 16:25:45 executing program 4 (fault-call:1 fault-nth:3): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:45 executing program 0: socketpair(0x22, 0x3, 0x9100, &(0x7f00000002c0)) 16:25:45 executing program 1: socketpair(0x2, 0x6, 0x2a010000, &(0x7f00000002c0)) 16:25:45 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:25:45 executing program 3: socketpair(0x2, 0x6, 0x2a010000, &(0x7f00000002c0)) 16:25:45 executing program 2 (fault-call:1 fault-nth:3): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:45 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2358.066025][T25977] FAULT_INJECTION: forcing a failure. [ 2358.066025][T25977] name failslab, interval 1, probability 0, space 0, times 0 [ 2358.087773][T25978] FAULT_INJECTION: forcing a failure. [ 2358.087773][T25978] name failslab, interval 1, probability 0, space 0, times 0 [ 2358.095980][T25977] CPU: 1 PID: 25977 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2358.108805][T25977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2358.118876][T25977] Call Trace: [ 2358.122171][T25977] dump_stack+0x141/0x1d7 [ 2358.126612][T25977] should_fail.cold+0x5/0xa [ 2358.131161][T25977] ? percpu_ref_init+0xcc/0x3a0 [ 2358.136032][T25977] should_failslab+0x5/0x10 [ 2358.140571][T25977] kmem_cache_alloc_trace+0x55/0x290 [ 2358.145880][T25977] ? io_uring_fasync+0x60/0x60 [ 2358.150662][T25977] percpu_ref_init+0xcc/0x3a0 [ 2358.155355][T25977] io_uring_setup+0x42d/0x2a80 [ 2358.160661][T25977] ? __context_tracking_exit+0xb8/0xe0 [ 2358.166136][T25977] ? io_connect+0x680/0x680 [ 2358.170670][T25977] ? syscall_enter_from_user_mode+0x27/0x70 [ 2358.176591][T25977] do_syscall_64+0x3a/0xb0 [ 2358.181290][T25977] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2358.187205][T25977] RIP: 0033:0x4665f9 [ 2358.191109][T25977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:25:46 executing program 0: socketpair(0x22, 0x3, 0x9101, &(0x7f00000002c0)) 16:25:46 executing program 1: socketpair(0x2, 0x6, 0x2b000000, &(0x7f00000002c0)) 16:25:46 executing program 3: socketpair(0x2, 0x6, 0x2b000000, &(0x7f00000002c0)) [ 2358.210726][T25977] RSP: 002b:00007f003d55d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2358.219179][T25977] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2358.227193][T25977] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2358.236561][T25977] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2358.244539][T25977] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2358.252515][T25977] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 [ 2358.260537][T25978] CPU: 0 PID: 25978 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 2358.268975][T25978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2358.279062][T25978] Call Trace: [ 2358.282352][T25978] dump_stack+0x141/0x1d7 [ 2358.286712][T25978] should_fail.cold+0x5/0xa [ 2358.291243][T25978] ? percpu_ref_init+0xcc/0x3a0 [ 2358.296136][T25978] should_failslab+0x5/0x10 [ 2358.300658][T25978] kmem_cache_alloc_trace+0x55/0x290 [ 2358.305990][T25978] ? io_uring_fasync+0x60/0x60 [ 2358.310774][T25978] percpu_ref_init+0xcc/0x3a0 [ 2358.315475][T25978] io_uring_setup+0x42d/0x2a80 [ 2358.320257][T25978] ? __context_tracking_exit+0xb8/0xe0 [ 2358.325740][T25978] ? io_connect+0x680/0x680 [ 2358.330269][T25978] ? syscall_enter_from_user_mode+0x27/0x70 [ 2358.336715][T25978] do_syscall_64+0x3a/0xb0 [ 2358.341167][T25978] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2358.347085][T25978] RIP: 0033:0x4665f9 16:25:46 executing program 2 (fault-call:1 fault-nth:4): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:46 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x60, 0x19}, 0x18) [ 2358.350993][T25978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2358.370965][T25978] RSP: 002b:00007f9f2ac32108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2358.379401][T25978] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2358.387412][T25978] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2358.395412][T25978] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2358.403407][T25978] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2358.411403][T25978] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 [ 2358.459337][T25985] FAULT_INJECTION: forcing a failure. [ 2358.459337][T25985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2358.497795][T25985] CPU: 1 PID: 25985 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2358.506260][T25985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2358.516543][T25985] Call Trace: [ 2358.519839][T25985] dump_stack+0x141/0x1d7 [ 2358.524253][T25985] should_fail.cold+0x5/0xa [ 2358.528922][T25985] __alloc_pages_nodemask+0x189/0x730 [ 2358.534329][T25985] ? __debug_object_init+0x409/0xd10 [ 2358.539643][T25985] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 2358.546440][T25985] ? debug_object_destroy+0x210/0x210 [ 2358.551842][T25985] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2358.557594][T25985] ? cap_capable+0x1f1/0x280 [ 2358.562252][T25985] alloc_pages_current+0x18c/0x2a0 [ 2358.567396][T25985] __get_free_pages+0x8/0x40 [ 2358.572024][T25985] io_uring_setup+0xcc3/0x2a80 [ 2358.576832][T25985] ? __context_tracking_exit+0xb8/0xe0 [ 2358.582320][T25985] ? io_connect+0x680/0x680 [ 2358.586831][T25985] ? syscall_enter_from_user_mode+0x27/0x70 [ 2358.592817][T25985] do_syscall_64+0x3a/0xb0 [ 2358.597232][T25985] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2358.603125][T25985] RIP: 0033:0x4665f9 [ 2358.607008][T25985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2358.626612][T25985] RSP: 002b:00007f003d55d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2358.635022][T25985] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2358.643087][T25985] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2358.651047][T25985] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 16:25:46 executing program 4 (fault-call:1 fault-nth:4): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:46 executing program 3: socketpair(0x2, 0x6, 0x2b010000, &(0x7f00000002c0)) 16:25:46 executing program 1: socketpair(0x2, 0x6, 0x2b010000, &(0x7f00000002c0)) 16:25:46 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x19}, 0x18) 16:25:46 executing program 0: socketpair(0x22, 0x3, 0x9200, &(0x7f00000002c0)) [ 2358.659177][T25985] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2358.667132][T25985] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 16:25:46 executing program 2 (fault-call:1 fault-nth:5): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:46 executing program 1: socketpair(0x2, 0x6, 0x2c000000, &(0x7f00000002c0)) [ 2358.823630][T26000] FAULT_INJECTION: forcing a failure. [ 2358.823630][T26000] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2358.847196][T26000] CPU: 1 PID: 26000 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 2358.855780][T26000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2358.865967][T26000] Call Trace: [ 2358.869261][T26000] dump_stack+0x141/0x1d7 [ 2358.873621][T26000] should_fail.cold+0x5/0xa [ 2358.878168][T26000] __alloc_pages_nodemask+0x189/0x730 [ 2358.883564][T26000] ? __debug_object_init+0x409/0xd10 [ 2358.888878][T26000] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 2358.895948][T26000] ? debug_object_destroy+0x210/0x210 [ 2358.901366][T26000] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2358.907137][T26000] ? cap_capable+0x1f1/0x280 [ 2358.911768][T26000] alloc_pages_current+0x18c/0x2a0 [ 2358.916921][T26000] __get_free_pages+0x8/0x40 [ 2358.921547][T26000] io_uring_setup+0xcc3/0x2a80 [ 2358.926343][T26000] ? __context_tracking_exit+0xb8/0xe0 [ 2358.931846][T26000] ? io_connect+0x680/0x680 [ 2358.937010][T26000] ? syscall_enter_from_user_mode+0x27/0x70 [ 2358.952360][T26000] do_syscall_64+0x3a/0xb0 [ 2358.956832][T26000] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2358.962761][T26000] RIP: 0033:0x4665f9 16:25:46 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x18) 16:25:46 executing program 0: socketpair(0x22, 0x3, 0x9201, &(0x7f00000002c0)) 16:25:46 executing program 3: socketpair(0x2, 0x6, 0x2c000000, &(0x7f00000002c0)) 16:25:46 executing program 0: socketpair(0x22, 0x3, 0x9300, &(0x7f00000002c0)) 16:25:47 executing program 3: socketpair(0x2, 0x6, 0x2c010000, &(0x7f00000002c0)) [ 2358.966682][T26000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2358.987379][T26000] RSP: 002b:00007f9f2ac32108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2358.995821][T26000] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2359.003807][T26000] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2359.011798][T26000] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2359.019793][T26000] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2359.027790][T26000] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 [ 2359.091102][T26010] FAULT_INJECTION: forcing a failure. [ 2359.091102][T26010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2359.138199][T26010] CPU: 0 PID: 26010 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2359.147017][T26010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2359.157352][T26010] Call Trace: [ 2359.160647][T26010] dump_stack+0x141/0x1d7 [ 2359.165014][T26010] should_fail.cold+0x5/0xa [ 2359.169560][T26010] __alloc_pages_nodemask+0x189/0x730 [ 2359.176098][T26010] ? __debug_object_init+0x409/0xd10 [ 2359.181433][T26010] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 2359.188228][T26010] ? debug_object_destroy+0x210/0x210 [ 2359.193625][T26010] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2359.199389][T26010] ? cap_capable+0x1f1/0x280 [ 2359.204020][T26010] alloc_pages_current+0x18c/0x2a0 [ 2359.209174][T26010] __get_free_pages+0x8/0x40 [ 2359.213791][T26010] io_uring_setup+0xe7a/0x2a80 [ 2359.218739][T26010] ? __context_tracking_exit+0xb8/0xe0 [ 2359.224208][T26010] ? io_connect+0x680/0x680 [ 2359.228957][T26010] ? syscall_enter_from_user_mode+0x27/0x70 [ 2359.234862][T26010] do_syscall_64+0x3a/0xb0 [ 2359.239283][T26010] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2359.245184][T26010] RIP: 0033:0x4665f9 [ 2359.249075][T26010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2359.268694][T26010] RSP: 002b:00007f003d55d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2359.277096][T26010] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 16:25:47 executing program 4 (fault-call:1 fault-nth:5): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:47 executing program 1: socketpair(0x2, 0x6, 0x2c010000, &(0x7f00000002c0)) 16:25:47 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x18) 16:25:47 executing program 0: socketpair(0x22, 0x3, 0x9301, &(0x7f00000002c0)) 16:25:47 executing program 3: socketpair(0x2, 0x6, 0x2d000000, &(0x7f00000002c0)) 16:25:47 executing program 2 (fault-call:1 fault-nth:6): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 2359.285080][T26010] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2359.293058][T26010] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2359.301050][T26010] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2359.309057][T26010] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 [ 2359.453063][T26024] FAULT_INJECTION: forcing a failure. [ 2359.453063][T26024] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.507058][T26026] FAULT_INJECTION: forcing a failure. [ 2359.507058][T26026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2359.507470][T26024] CPU: 1 PID: 26024 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2359.535082][T26024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2359.545159][T26024] Call Trace: [ 2359.548455][T26024] dump_stack+0x141/0x1d7 [ 2359.552841][T26024] should_fail.cold+0x5/0xa [ 2359.557476][T26024] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2359.563923][T26024] should_failslab+0x5/0x10 [ 2359.568450][T26024] kmem_cache_alloc_trace+0x55/0x290 [ 2359.573766][T26024] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2359.579956][T26024] io_uring_setup+0x1dd6/0x2a80 [ 2359.584840][T26024] ? __context_tracking_exit+0xb8/0xe0 [ 2359.590331][T26024] ? io_connect+0x680/0x680 [ 2359.594871][T26024] ? syscall_enter_from_user_mode+0x27/0x70 [ 2359.600798][T26024] do_syscall_64+0x3a/0xb0 16:25:47 executing program 1: socketpair(0x2, 0x6, 0x2d000000, &(0x7f00000002c0)) 16:25:47 executing program 0: socketpair(0x22, 0x3, 0x9400, &(0x7f00000002c0)) 16:25:47 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x18) 16:25:47 executing program 1: socketpair(0x2, 0x6, 0x2d010000, &(0x7f00000002c0)) [ 2359.605242][T26024] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2359.611166][T26024] RIP: 0033:0x4665f9 [ 2359.615108][T26024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2359.635102][T26024] RSP: 002b:00007f003d55d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2359.643536][T26024] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2359.651607][T26024] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2359.659596][T26024] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2359.667583][T26024] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2359.675576][T26024] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 [ 2359.683582][T26026] CPU: 0 PID: 26026 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 2359.692054][T26026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2359.702612][T26026] Call Trace: [ 2359.705906][T26026] dump_stack+0x141/0x1d7 [ 2359.710285][T26026] should_fail.cold+0x5/0xa [ 2359.714819][T26026] __alloc_pages_nodemask+0x189/0x730 [ 2359.720250][T26026] ? __debug_object_init+0x409/0xd10 [ 2359.725651][T26026] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 2359.732442][T26026] ? debug_object_destroy+0x210/0x210 [ 2359.737883][T26026] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2359.739839][T26024] ------------[ cut here ]------------ [ 2359.743624][T26026] ? cap_capable+0x1f1/0x280 [ 2359.743663][T26026] alloc_pages_current+0x18c/0x2a0 [ 2359.743697][T26026] __get_free_pages+0x8/0x40 [ 2359.743727][T26026] io_uring_setup+0xe7a/0x2a80 [ 2359.743758][T26026] ? __context_tracking_exit+0xb8/0xe0 [ 2359.743788][T26026] ? io_connect+0x680/0x680 [ 2359.757542][T26024] WARNING: CPU: 1 PID: 26024 at fs/io_uring.c:7081 io_rsrc_node_switch+0x2a5/0x390 [ 2359.759202][T26026] ? syscall_enter_from_user_mode+0x27/0x70 [ 2359.759246][T26026] do_syscall_64+0x3a/0xb0 [ 2359.778087][T26024] Modules linked in: [ 2359.778525][T26026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2359.789664][T26024] [ 2359.793857][T26026] RIP: 0033:0x4665f9 [ 2359.793882][T26026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2359.793908][T26026] RSP: 002b:00007f9f2ac32108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2359.793935][T26026] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 16:25:47 executing program 3: socketpair(0x2, 0x6, 0x2d010000, &(0x7f00000002c0)) 16:25:47 executing program 5 (fault-call:0 fault-nth:0): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x19}, 0x18) [ 2359.793954][T26026] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2359.793970][T26026] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2359.793987][T26026] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2359.794003][T26026] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 [ 2359.909172][T26036] FAULT_INJECTION: forcing a failure. [ 2359.909172][T26036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2359.947894][T26024] CPU: 0 PID: 26024 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2359.954941][T26036] CPU: 1 PID: 26036 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2359.965038][T26036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2359.975198][T26036] Call Trace: [ 2359.978489][T26036] dump_stack+0x141/0x1d7 [ 2359.979748][T26024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2359.982847][T26036] should_fail.cold+0x5/0xa [ 2359.982898][T26036] _copy_from_user+0x2c/0x180 [ 2359.982935][T26036] __x64_sys_openat2+0x138/0x280 [ 2359.982970][T26036] ? __ia32_sys_openat+0x1f0/0x1f0 [ 2359.996911][T26024] RIP: 0010:io_rsrc_node_switch+0x2a5/0x390 [ 2359.997804][T26036] ? syscall_enter_from_user_mode+0x27/0x70 [ 2359.997848][T26036] do_syscall_64+0x3a/0xb0 [ 2359.997876][T26036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2360.005176][T26024] Code: ff 4d 85 e4 74 a4 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 fc 00 99 ff e8 f7 00 99 ff 0f 0b e9 ee fd ff ff e8 eb 00 99 ff <0f> 0b e9 9d fd ff ff 4c 89 f7 e8 7c e0 dc ff eb 8b 4c 89 ef e8 72 [ 2360.007476][T26036] RIP: 0033:0x4665f9 [ 2360.007500][T26036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.007525][T26036] RSP: 002b:00007f8128f67188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 2360.007554][T26036] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2360.007572][T26036] RDX: 0000000020000080 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 2360.018057][T26024] RSP: 0018:ffffc900161a7d90 EFLAGS: 00010246 16:25:48 executing program 4 (fault-call:1 fault-nth:6): syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:25:48 executing program 3: socketpair(0x2, 0x6, 0x2e000000, &(0x7f00000002c0)) 16:25:48 executing program 0: socketpair(0x22, 0x3, 0x9401, &(0x7f00000002c0)) 16:25:48 executing program 1: socketpair(0x2, 0x6, 0x2e000000, &(0x7f00000002c0)) 16:25:48 executing program 5 (fault-call:0 fault-nth:1): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x19}, 0x18) [ 2360.018655][T26036] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.026398][T26024] [ 2360.028945][T26036] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 2360.028966][T26036] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 [ 2360.137235][T26024] RAX: 0000000000040000 RBX: ffff888029168000 RCX: ffffc9000d77c000 [ 2360.146944][T26024] RDX: 0000000000040000 RSI: ffffffff81db5d25 RDI: ffff888029168000 [ 2360.172205][T26024] RBP: 0000000000000000 R08: 0000000000000dc0 R09: ffffffff8c0b37d3 [ 2360.194330][T26043] FAULT_INJECTION: forcing a failure. [ 2360.194330][T26043] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.210731][T26024] R10: fffffbfff18166fa R11: 0000000000000000 R12: 0000000000000000 [ 2360.240996][T26048] FAULT_INJECTION: forcing a failure. [ 2360.240996][T26048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2360.259983][T26024] R13: 0000000000000000 R14: ffff888029168808 R15: 0000000000000000 [ 2360.277374][T26043] CPU: 0 PID: 26043 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 2360.285826][T26043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2360.296185][T26043] Call Trace: [ 2360.299481][T26043] dump_stack+0x141/0x1d7 [ 2360.304192][T26043] should_fail.cold+0x5/0xa [ 2360.308727][T26043] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2360.315127][T26043] should_failslab+0x5/0x10 [ 2360.320349][T26043] kmem_cache_alloc_trace+0x55/0x290 [ 2360.325673][T26043] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2360.331865][T26043] io_uring_setup+0x1dd6/0x2a80 [ 2360.337522][T26043] ? __context_tracking_exit+0xb8/0xe0 [ 2360.343019][T26043] ? io_connect+0x680/0x680 [ 2360.347563][T26043] ? syscall_enter_from_user_mode+0x27/0x70 [ 2360.353491][T26043] do_syscall_64+0x3a/0xb0 [ 2360.358016][T26043] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2360.363945][T26043] RIP: 0033:0x4665f9 [ 2360.367862][T26043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.387494][T26043] RSP: 002b:00007f9f2ac32108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2360.390991][T26024] FS: 00007f003d55d700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 2360.395965][T26043] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2360.395990][T26043] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2360.396011][T26043] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2360.396031][T26043] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2360.396051][T26043] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 [ 2360.446225][T26048] CPU: 1 PID: 26048 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 2360.454686][T26048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2360.464753][T26048] Call Trace: [ 2360.468047][T26048] dump_stack+0x141/0x1d7 [ 2360.472398][T26048] should_fail.cold+0x5/0xa [ 2360.476922][T26048] _copy_to_user+0x2c/0x150 [ 2360.481440][T26048] simple_read_from_buffer+0xcc/0x160 [ 2360.486835][T26048] proc_fail_nth_read+0x187/0x220 [ 2360.543359][T26048] ? proc_exe_link+0x1d0/0x1d0 [ 2360.548150][T26048] ? security_file_permission+0x248/0x560 [ 2360.553903][T26048] ? proc_exe_link+0x1d0/0x1d0 [ 2360.558679][T26048] vfs_read+0x1b5/0x570 [ 2360.562947][T26048] ksys_read+0x12d/0x250 [ 2360.567203][T26048] ? vfs_write+0xa30/0xa30 [ 2360.571917][T26048] ? syscall_enter_from_user_mode+0x27/0x70 [ 2360.577844][T26048] do_syscall_64+0x3a/0xb0 [ 2360.582550][T26048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2360.588492][T26048] RIP: 0033:0x41937c [ 2360.592394][T26048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2360.612119][T26048] RSP: 002b:00007f8128f67170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2360.620551][T26048] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 2360.628541][T26048] RDX: 000000000000000f RSI: 00007f8128f671e0 RDI: 0000000000000003 [ 2360.636526][T26048] RBP: 00007f8128f671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.645238][T26048] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 2360.653304][T26048] R13: 0000000000a9fb1f R14: 00007f8128f67300 R15: 0000000000022000 [ 2360.666714][T26024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2360.674480][T26024] CR2: 0000000000544038 CR3: 000000002a3dd000 CR4: 00000000001506e0 [ 2360.695902][T26024] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2360.713841][T26024] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2360.743186][T26024] Call Trace: [ 2360.749009][T26024] ? __kasan_kmalloc+0xad/0xc0 [ 2360.758595][T26024] io_uring_setup+0xf75/0x2a80 [ 2360.776334][T26024] ? __context_tracking_exit+0xb8/0xe0 [ 2360.783262][T26024] ? io_connect+0x680/0x680 [ 2360.787915][T26024] ? syscall_enter_from_user_mode+0x27/0x70 [ 2360.796762][T26024] do_syscall_64+0x3a/0xb0 [ 2360.801981][T26024] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2360.808163][T26024] RIP: 0033:0x4665f9 [ 2360.813193][T26024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.833779][T26024] RSP: 002b:00007f003d55d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2360.843378][T26024] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2360.852674][T26024] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2360.860774][T26024] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2360.868871][T26024] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2360.876915][T26024] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 [ 2360.885791][T26024] Kernel panic - not syncing: panic_on_warn set ... [ 2360.892383][T26024] CPU: 0 PID: 26024 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 2360.900856][T26024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2360.910924][T26024] Call Trace: [ 2360.914225][T26024] dump_stack+0x141/0x1d7 [ 2360.918560][T26024] panic+0x306/0x73d [ 2360.922503][T26024] ? __warn_printk+0xf3/0xf3 [ 2360.927140][T26024] ? __warn.cold+0x1a/0x44 [ 2360.931561][T26024] ? io_rsrc_node_switch+0x2a5/0x390 [ 2360.936906][T26024] __warn.cold+0x35/0x44 [ 2360.941150][T26024] ? io_rsrc_node_switch+0x2a5/0x390 [ 2360.947425][T26024] report_bug+0x1bd/0x210 [ 2360.951798][T26024] handle_bug+0x3c/0x60 [ 2360.956283][T26024] exc_invalid_op+0x14/0x40 [ 2360.960784][T26024] asm_exc_invalid_op+0x12/0x20 [ 2360.965654][T26024] RIP: 0010:io_rsrc_node_switch+0x2a5/0x390 [ 2360.971572][T26024] Code: ff 4d 85 e4 74 a4 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 fc 00 99 ff e8 f7 00 99 ff 0f 0b e9 ee fd ff ff e8 eb 00 99 ff <0f> 0b e9 9d fd ff ff 4c 89 f7 e8 7c e0 dc ff eb 8b 4c 89 ef e8 72 [ 2360.991716][T26024] RSP: 0018:ffffc900161a7d90 EFLAGS: 00010246 [ 2360.997797][T26024] RAX: 0000000000040000 RBX: ffff888029168000 RCX: ffffc9000d77c000 [ 2361.005764][T26024] RDX: 0000000000040000 RSI: ffffffff81db5d25 RDI: ffff888029168000 [ 2361.013751][T26024] RBP: 0000000000000000 R08: 0000000000000dc0 R09: ffffffff8c0b37d3 [ 2361.021762][T26024] R10: fffffbfff18166fa R11: 0000000000000000 R12: 0000000000000000 [ 2361.030375][T26024] R13: 0000000000000000 R14: ffff888029168808 R15: 0000000000000000 [ 2361.038388][T26024] ? io_rsrc_node_switch+0x2a5/0x390 [ 2361.043718][T26024] ? __kasan_kmalloc+0xad/0xc0 [ 2361.048528][T26024] io_uring_setup+0xf75/0x2a80 [ 2361.053298][T26024] ? __context_tracking_exit+0xb8/0xe0 [ 2361.058969][T26024] ? io_connect+0x680/0x680 [ 2361.063690][T26024] ? syscall_enter_from_user_mode+0x27/0x70 [ 2361.069602][T26024] do_syscall_64+0x3a/0xb0 [ 2361.074129][T26024] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2361.080043][T26024] RIP: 0033:0x4665f9 [ 2361.083941][T26024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.103755][T26024] RSP: 002b:00007f003d55d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2361.112171][T26024] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2361.120151][T26024] RDX: 0000000020ff8000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2361.128112][T26024] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2361.136074][T26024] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2361.144146][T26024] R13: 0000000020ff8000 R14: 0000000020000080 R15: 0000000020ff3000 [ 2361.152726][T26024] Kernel Offset: disabled [ 2361.157345][T26024] Rebooting in 86400 seconds..