3679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) 06:10:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) 06:10:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @multicast1, {[@generic={0x0, 0x6, "411761d6"}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x13, 0x0, [@local, @rand_addr, @private, @broadcast]}, @cipso={0x86, 0x6}, @ssrr={0x89, 0x1f, 0x0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@broadcast}]}, @cipso={0x86, 0x24, 0x0, [{0x0, 0x7, "1e4c746745"}, {0x0, 0x6, "9e04753e"}, {0x0, 0x11, "59ec389a5240a540ed103c995b9832"}]}]}}}}}) 06:10:46 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 06:10:46 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4) 06:10:46 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:46 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 06:10:46 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) 06:10:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) 06:10:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @multicast1, {[@generic={0x0, 0x8, "411761d6e7c2"}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x13, 0x0, [@local, @rand_addr, @private, @broadcast]}, @cipso={0x86, 0x6}, @ssrr={0x89, 0x1f, 0x0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@broadcast}]}, @cipso={0x86, 0x24, 0x0, [{0x0, 0x7, "1e4c746745"}, {0x0, 0x6, "9e04753e"}, {0x0, 0x11, "59ec389a5240a540ed103c995b9832"}]}]}}}}}) 06:10:46 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4) 06:10:46 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 06:10:46 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) 06:10:46 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 06:10:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) 06:10:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @multicast1, {[@generic={0x0, 0x8, "411761d6e7c2"}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x13, 0x0, [@local, @rand_addr, @private, @broadcast]}, @cipso={0x86, 0x6}, @ssrr={0x89, 0x1f, 0x0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@broadcast}]}, @cipso={0x86, 0x24, 0x0, [{0x0, 0x7, "1e4c746745"}, {0x0, 0x6, "9e04753e"}, {0x0, 0x11, "59ec389a5240a540ed103c995b9832"}]}]}}}}}) 06:10:46 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) 06:10:46 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 06:10:46 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) 06:10:46 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 06:10:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) 06:10:46 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 06:10:46 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) 06:10:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @multicast1, {[@generic={0x0, 0x8, "411761d6e7c2"}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x13, 0x0, [@local, @rand_addr, @private, @broadcast]}, @cipso={0x86, 0x6}, @ssrr={0x89, 0x1f, 0x0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@broadcast}]}, @cipso={0x86, 0x24, 0x0, [{0x0, 0x7, "1e4c746745"}, {0x0, 0x6, "9e04753e"}, {0x0, 0x11, "59ec389a5240a540ed103c995b9832"}]}]}}}}}) 06:10:46 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 06:10:46 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) 06:10:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:46 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 06:10:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:46 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) 06:10:46 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) 06:10:46 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 06:10:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:46 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:46 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:46 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:46 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) 06:10:46 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) 06:10:46 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)) 06:10:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:46 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:47 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r2 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r3 = getpgrp(0xffffffffffffffff) mq_notify(r2, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r3}) 06:10:47 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r2 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r3 = getpgrp(0xffffffffffffffff) mq_notify(r2, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r3}) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) getpgrp(0xffffffffffffffff) 06:10:47 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 06:10:47 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) getpgrp(0xffffffffffffffff) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:47 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0200, 0x0) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:47 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:47 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:47 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) 06:10:47 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:47 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:47 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:47 executing program 2: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) 06:10:47 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:47 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:47 executing program 2: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:47 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) 06:10:47 executing program 2: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:47 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="a84a8947b7af8d97c8142b99c4a20c3c7c421efe0d91fe048d8fb4fc93d7eb7f628f28003209b1b7b46d8eb072bc9d17faa4fd2a476dae17df205f3fceb9215b53e629960b570d64ea6b79fe96986d5768", 0x51, 0x4004, &(0x7f00000000c0)={0x23, 0x7e, 0x31, 0x6}, 0x10) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:47 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 06:10:47 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:47 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:47 executing program 4: bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x7, 0x5d, 0x7f}, 0x10) 06:10:47 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 3: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 3: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 06:10:47 executing program 4: bind$phonet(0xffffffffffffffff, 0x0, 0x0) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 3: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 06:10:47 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) 06:10:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:47 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) 06:10:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) 06:10:47 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:47 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:47 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:47 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:47 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:47 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) 06:10:48 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff, 0x0, 0x4, 0x8}, &(0x7f0000000200)) 06:10:48 executing program 5: read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:48 executing program 0: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:48 executing program 5: read$msr(0xffffffffffffffff, 0x0, 0x0) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7ff, 0x4, 0x8}, &(0x7f0000000200)) 06:10:48 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0x8}, &(0x7f0000000200)) 06:10:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:48 executing program 0: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 06:10:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff}, &(0x7f0000000200)) 06:10:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 0: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 06:10:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff}, 0x0) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 06:10:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 06:10:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff}, 0x0) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x8}, &(0x7f0000000200)) 06:10:48 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff}, 0x0) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff}, 0x0) 06:10:48 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:10:48 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff}, 0x0) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)) 06:10:48 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) 06:10:48 executing program 3: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 06:10:48 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x1ff}, 0x0) 06:10:48 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180), 0x0) 06:10:48 executing program 3: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) getpgrp(0xffffffffffffffff) 06:10:48 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:48 executing program 2: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 06:10:48 executing program 0: mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 06:10:48 executing program 3: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180), 0x0) 06:10:48 executing program 0: mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:48 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:48 executing program 2: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 06:10:48 executing program 3: mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 06:10:48 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180), 0x0) 06:10:48 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 06:10:48 executing program 2: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 06:10:48 executing program 0: mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 06:10:48 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:48 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 06:10:48 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) 06:10:48 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 06:10:48 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180), 0x0) 06:10:48 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) 06:10:48 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 06:10:48 executing program 2: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:48 executing program 4: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:48 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180), 0x0) 06:10:48 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) 06:10:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:48 executing program 2: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:48 executing program 4: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:48 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:48 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180), 0x0) 06:10:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 4: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 2: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:10:49 executing program 2: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 4: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 2: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:10:49 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) 06:10:49 executing program 0: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 2: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:10:49 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 3: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) 06:10:49 executing program 2: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 0: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 5: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 06:10:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) 06:10:49 executing program 5: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 2: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) 06:10:49 executing program 0: r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x26) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 5: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 06:10:49 executing program 4: syz_open_dev$vcsn(0x0, 0x9, 0x842) 06:10:49 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 06:10:49 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 06:10:49 executing program 4: syz_open_dev$vcsn(0x0, 0x9, 0x842) 06:10:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 4: syz_open_dev$vcsn(0x0, 0x9, 0x842) 06:10:49 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x4d) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x9, 0x842) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x842) 06:10:49 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x842) 06:10:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) 06:10:49 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) 06:10:49 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x9, 0x842) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r2 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r3 = getpgrp(0xffffffffffffffff) mq_notify(r2, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r3}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 0: syz_open_dev$vcsn(0x0, 0x9, 0x842) 06:10:49 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x8841) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd0ba}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c080) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x486814d6f9826dca, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4721}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000740)={{&(0x7f00000006c0)={'Accelerator\x00', {&(0x7f0000000400)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {0x4}, {&(0x7f0000000340)=@adf_dec={@normal='NumberCyInstances\x00', {0x3f}}}}}, {&(0x7f0000000640)={'GENERAL\x00', {&(0x7f0000000580)=@adf_dec={@bank={'Bank', '2', 'CoreAffinity\x00'}, {0x6}, {&(0x7f00000004c0)=@adf_str={@format={'Dc', '3', 'BankNumber\x00'}, {"a3f193f9cd61c85d7034ea3072031e59e46a52358b7ba84884811c8d60ccc19d9a92c18c3de40f329c1e4dc6888b994734ef3324fab1c1ef825e613258aaff42"}}}}}}}}}, 0x3f}) syslog(0x3, &(0x7f0000000780)=""/158, 0x9e) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r1, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x801) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@cgroup=r1, r1, 0x26}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0x4000845) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff00}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x14008000) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x29, 0x75, 0x3, 0x8, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x7, 0x2, 0x7ff}}) 06:10:49 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x9, 0x842) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) getpgrp(0xffffffffffffffff) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 06:10:49 executing program 0: syz_open_dev$vcsn(0x0, 0x9, 0x842) 06:10:49 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 06:10:49 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x842) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 06:10:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) getpgrp(0xffffffffffffffff) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 0: syz_open_dev$vcsn(0x0, 0x9, 0x842) 06:10:49 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 5: socket$inet(0x2, 0x2, 0x1) 06:10:49 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 2: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x842) 06:10:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 5: socket$inet(0x2, 0x0, 0x1) 06:10:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 06:10:49 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 06:10:49 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 06:10:49 executing program 2: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:49 executing program 5: socket$inet(0x2, 0x0, 0x1) 06:10:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:49 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 06:10:50 executing program 4: socket$inet(0x2, 0x2, 0x1) 06:10:50 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 2: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'hsr0\x00'}}) 06:10:50 executing program 0: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 06:10:50 executing program 5: socket$inet(0x2, 0x0, 0x1) 06:10:50 executing program 4: socket$inet(0x2, 0x0, 0x1) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) 06:10:50 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 4: socket$inet(0x2, 0x0, 0x1) 06:10:50 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 06:10:50 executing program 5: socket$inet(0x2, 0x2, 0x0) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) 06:10:50 executing program 5: socket$inet(0x2, 0x2, 0x0) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 06:10:50 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 4: socket$inet(0x2, 0x0, 0x1) 06:10:50 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 5: socket$inet(0x2, 0x2, 0x0) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) 06:10:50 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) read$msr(r7, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0xa66a, 0x400000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0)="9e0b538e93e55a9e012226bfa1ed08488f44466404c923ec6591a31828fca3c05511bb8edd14e1967bd08ae9623a82e7e23e68263ccc79b00b22e204d9ddbea7d477b82c6b5432844c2ae7bc33d8a4c6e21aa931973080b28e316f38549f908234", &(0x7f0000000140)=@buf="57b2fc1584a1cd764c05ae1702efc149a5ce73", 0x1}, 0x20) 06:10:50 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) 06:10:50 executing program 4: socket$inet(0x2, 0x2, 0x0) 06:10:50 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0xa66a, 0x400000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0)="9e0b538e93e55a9e012226bfa1ed08488f44466404c923ec6591a31828fca3c05511bb8edd14e1967bd08ae9623a82e7e23e68263ccc79b00b22e204d9ddbea7d477b82c6b5432844c2ae7bc33d8a4c6e21aa931973080b28e316f38549f908234", &(0x7f0000000140)=@buf="57b2fc1584a1cd764c05ae1702efc149a5ce73", 0x1}, 0x20) 06:10:50 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) mq_timedsend(r0, &(0x7f0000001600)="d5961a01eb9701418863382ad14aa96d16f8269c1275932c4986810ba5771e8bbdce745d48fecba44091d38a2a5c6a3ccf5810fe4b81c300547a1da75f1e211c7b9fafe8eb441fc8c29f4bb9bebc0d0d6ff3f78163679f7cb31129280964445655869b28fe236c9c1455c6431a23f38302cabea3660606ca9039e8e097a512056e894e7de21d1d232d6b9e2c2c28e4e4", 0x90, 0x1, &(0x7f00000016c0)={0x77359400}) 06:10:50 executing program 4: socket$inet(0x2, 0x2, 0x0) 06:10:50 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0xa66a, 0x400000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0)="9e0b538e93e55a9e012226bfa1ed08488f44466404c923ec6591a31828fca3c05511bb8edd14e1967bd08ae9623a82e7e23e68263ccc79b00b22e204d9ddbea7d477b82c6b5432844c2ae7bc33d8a4c6e21aa931973080b28e316f38549f908234", &(0x7f0000000140)=@buf="57b2fc1584a1cd764c05ae1702efc149a5ce73", 0x1}, 0x20) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 06:10:50 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r2 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r3 = getpgrp(0xffffffffffffffff) mq_notify(r2, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r3}) 06:10:50 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xa66a, 0x400000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x11}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0)="9e0b538e93e55a9e012226bfa1ed08488f44466404c923ec6591a31828fca3c05511bb8edd14e1967bd08ae9623a82e7e23e68263ccc79b00b22e204d9ddbea7d477b82c6b5432844c2ae7bc33d8a4c6e21aa931973080b28e316f38549f908234", &(0x7f0000000140)=@buf="57b2fc1584a1cd764c05ae1702efc149a5ce73", 0x1}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x8) 06:10:50 executing program 4: socket$inet(0x2, 0x2, 0x0) 06:10:50 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0)="9e0b538e93e55a9e012226bfa1ed08488f44466404c923ec6591a31828fca3c05511bb8edd14e1967bd08ae9623a82e7e23e68263ccc79b00b22e204d9ddbea7d477b82c6b5432844c2ae7bc33d8a4c6e21aa931973080b28e316f38549f908234", &(0x7f0000000140)=@buf="57b2fc1584a1cd764c05ae1702efc149a5ce73", 0x1}, 0x20) 06:10:50 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendto$phonet(r0, &(0x7f0000000140)="38f5dded38bc8c358baeb46bc52404a29d16933413d499b7540af6a7b366d94312327acb077b728d02fd006223de486b95c753d9a3812a097bd0aa742310fb25cc5307c4", 0x44, 0x24000001, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x400002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r1) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3ef, 0x280400) mq_timedsend(r4, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) 06:10:50 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000002c0)=r6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r2 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) mq_notify(r2, &(0x7f00000015c0)={0x0, 0x34}) 06:10:50 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r4 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r5 = getpgrp(0xffffffffffffffff) mq_notify(r4, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="851000af8a69e204ad1699c88b0f", @ANYBLOB="67cf7a29a3cb42bcf0184cd9dc95266ede3175c895d291bc19fd99716a1dfc1e1eb9df66820c62c6be7b63a5920124ba77b79c53197fbbf87a", @ANYRES64=r2], &(0x7f0000000300)='syzkaller\x00', 0xffffeff9, 0x46, &(0x7f0000000100)=""/70, 0x79cc6dc69d74a04a, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0xb, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x400, 0xfffffffc}, 0x10, 0x11c1a, r0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r3, r3, r0, r0, r0, 0xffffffffffffffff]}, 0x80) 06:10:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendto$phonet(r0, &(0x7f0000000140)="38f5dded38bc8c358baeb46bc52404a29d16933413d499b7540af6a7b366d94312327acb077b728d02fd006223de486b95c753d9a3812a097bd0aa742310fb25cc5307c4", 0x44, 0x24000001, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x400002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r1) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3ef, 0x280400) mq_timedsend(r4, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:50 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator\x00', {&(0x7f0000000140)=@adf_str={@format={'Dc', '3', 'RingAsymTx\x00'}, {"7608b79d38634a92f785bd64724e437205c807649ae7f0725c2c9307dd0547cc0326d70cc92ef7b1435392c9d1c674fdaf1783f3afde651de632153563689bac"}, {&(0x7f0000000080)=@adf_hex={@format={'Dc', '3', 'NumConcurrentAsymRequests\x00'}, {0x15}}}}}}}, 0x6}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80094"], 0x4) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)) 06:10:50 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:50 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 06:10:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendto$phonet(r0, &(0x7f0000000140)="38f5dded38bc8c358baeb46bc52404a29d16933413d499b7540af6a7b366d94312327acb077b728d02fd006223de486b95c753d9a3812a097bd0aa742310fb25cc5307c4", 0x44, 0x24000001, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x400002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r1) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3ef, 0x280400) mq_timedsend(r4, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) r2 = mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) r3 = getpgrp(0xffffffffffffffff) mq_notify(r2, &(0x7f00000015c0)={0x0, 0x34, 0x0, @tid=r3}) 06:10:50 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator\x00', {&(0x7f0000000140)=@adf_str={@format={'Dc', '3', 'RingAsymTx\x00'}, {"7608b79d38634a92f785bd64724e437205c807649ae7f0725c2c9307dd0547cc0326d70cc92ef7b1435392c9d1c674fdaf1783f3afde651de632153563689bac"}, {&(0x7f0000000080)=@adf_hex={@format={'Dc', '3', 'NumConcurrentAsymRequests\x00'}, {0x15}}}}}}}, 0x6}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80094"], 0x4) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)) 06:10:50 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:50 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator\x00', {&(0x7f0000000140)=@adf_str={@format={'Dc', '3', 'RingAsymTx\x00'}, {"7608b79d38634a92f785bd64724e437205c807649ae7f0725c2c9307dd0547cc0326d70cc92ef7b1435392c9d1c674fdaf1783f3afde651de632153563689bac"}, {&(0x7f0000000080)=@adf_hex={@format={'Dc', '3', 'NumConcurrentAsymRequests\x00'}, {0x15}}}}}}}, 0x6}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80094"], 0x4) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)) 06:10:50 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) getpgrp(0xffffffffffffffff) 06:10:50 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000140)=@buf="57b2fc1584a1cd764c05ae1702efc149a5ce73", 0x1}, 0x20) 06:10:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendto$phonet(r0, &(0x7f0000000140)="38f5dded38bc8c358baeb46bc52404a29d16933413d499b7540af6a7b366d94312327acb077b728d02fd006223de486b95c753d9a3812a097bd0aa742310fb25cc5307c4", 0x44, 0x24000001, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x400002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r1) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:50 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator\x00', {&(0x7f0000000140)=@adf_str={@format={'Dc', '3', 'RingAsymTx\x00'}, {"7608b79d38634a92f785bd64724e437205c807649ae7f0725c2c9307dd0547cc0326d70cc92ef7b1435392c9d1c674fdaf1783f3afde651de632153563689bac"}, {&(0x7f0000000080)=@adf_hex={@format={'Dc', '3', 'NumConcurrentAsymRequests\x00'}, {0x15}}}}}}}, 0x6}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80094"], 0x4) 06:10:50 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendto$phonet(r0, &(0x7f0000000140)="38f5dded38bc8c358baeb46bc52404a29d16933413d499b7540af6a7b366d94312327acb077b728d02fd006223de486b95c753d9a3812a097bd0aa742310fb25cc5307c4", 0x44, 0x24000001, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x400002) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:50 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:50 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator\x00', {&(0x7f0000000140)=@adf_str={@format={'Dc', '3', 'RingAsymTx\x00'}, {"7608b79d38634a92f785bd64724e437205c807649ae7f0725c2c9307dd0547cc0326d70cc92ef7b1435392c9d1c674fdaf1783f3afde651de632153563689bac"}, {&(0x7f0000000080)=@adf_hex={@format={'Dc', '3', 'NumConcurrentAsymRequests\x00'}, {0x15}}}}}}}, 0x6}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80094"], 0x4) 06:10:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:50 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 06:10:50 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendto$phonet(r0, &(0x7f0000000140)="38f5dded38bc8c358baeb46bc52404a29d16933413d499b7540af6a7b366d94312327acb077b728d02fd006223de486b95c753d9a3812a097bd0aa742310fb25cc5307c4", 0x44, 0x24000001, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x400002) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80094"], 0x4) 06:10:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendto$phonet(r0, &(0x7f0000000140)="38f5dded38bc8c358baeb46bc52404a29d16933413d499b7540af6a7b366d94312327acb077b728d02fd006223de486b95c753d9a3812a097bd0aa742310fb25cc5307c4", 0x44, 0x24000001, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x400002) socket$nl_generic(0x10, 0x3, 0x10) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:51 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:51 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:51 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:51 executing program 4: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80094"], 0x4) 06:10:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendto$phonet(r0, &(0x7f0000000140)="38f5dded38bc8c358baeb46bc52404a29d16933413d499b7540af6a7b366d94312327acb077b728d02fd006223de486b95c753d9a3812a097bd0aa742310fb25cc5307c4", 0x44, 0x24000001, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x400002) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:51 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:51 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80094"], 0x4) 06:10:51 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:51 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendto$phonet(r0, &(0x7f0000000140)="38f5dded38bc8c358baeb46bc52404a29d16933413d499b7540af6a7b366d94312327acb077b728d02fd006223de486b95c753d9a3812a097bd0aa742310fb25cc5307c4", 0x44, 0x24000001, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:51 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 06:10:51 executing program 4: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 06:10:51 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendto$phonet(r0, &(0x7f0000000140)="38f5dded38bc8c358baeb46bc52404a29d16933413d499b7540af6a7b366d94312327acb077b728d02fd006223de486b95c753d9a3812a097bd0aa742310fb25cc5307c4", 0x44, 0x24000001, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:51 executing program 4: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 06:10:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 5: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 06:10:51 executing program 4: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:51 executing program 5: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:51 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:51 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:51 executing program 5: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 2: mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="529c06ac646f355169290f4bffe1602a4cae3e9a2a2f8bc169000e9f06821b57d5862083bb39e53b9a7180c3b0de0c69c5a31b66c311f3d05112", 0x3a, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x100) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x201080, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:51 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:51 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:51 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:51 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xa66a, 0x400000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x11}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0)="9e0b538e93e55a9e012226bfa1ed08488f44466404c923ec6591a31828fca3c05511bb8edd14e1967bd08ae9623a82e7e23e68263ccc79b00b22e204d9ddbea7d477b82c6b5432844c2ae7bc33d8a4c6e21aa931973080b28e316f38549f908234", &(0x7f0000000140)=@buf="57b2fc1584a1cd764c05ae1702efc149a5ce73", 0x1}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x8) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xa0}, 0x800) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r3, 0x10, 0x70bd29, 0x80, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x34}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x681b749e938e414c}, 0x42001) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) 06:10:51 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x34}) 06:10:51 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:51 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:51 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}) 06:10:51 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:51 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0x8040) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 1: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 3: mq_notify(0xffffffffffffffff, 0x0) 06:10:51 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 06:10:51 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:51 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:10:51 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:51 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 06:10:51 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 06:10:51 executing program 1: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 3: mq_notify(0xffffffffffffffff, 0x0) 06:10:51 executing program 0: mq_open(&(0x7f0000000440)='\x00', 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 06:10:51 executing program 5: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 1: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 06:10:51 executing program 0: mq_open(0x0, 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 3: mq_notify(0xffffffffffffffff, 0x0) 06:10:51 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c8"], 0x4) 06:10:51 executing program 5: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 06:10:51 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 1) 06:10:51 executing program 0: mq_open(0x0, 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 5: syz_emit_vhci(0x0, 0x4) 06:10:51 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:10:51 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 06:10:51 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) (async) 06:10:51 executing program 0: mq_open(0x0, 0x40, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) [ 122.340013] FAULT_INJECTION: forcing a failure. [ 122.340013] name failslab, interval 1, probability 0, space 0, times 1 [ 122.384096] CPU: 1 PID: 25111 Comm: syz-executor.1 Not tainted 4.14.270-syzkaller #0 [ 122.392016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.401376] Call Trace: [ 122.403972] dump_stack+0x1b2/0x281 [ 122.407611] should_fail.cold+0x10a/0x149 [ 122.411772] should_failslab+0xd6/0x130 [ 122.415759] kmem_cache_alloc_node+0x263/0x410 [ 122.420351] __alloc_skb+0x5c/0x510 [ 122.423982] vhci_write+0xb1/0x420 [ 122.427535] __vfs_write+0x44c/0x630 [ 122.431381] ? kernel_read+0x110/0x110 [ 122.435287] ? rw_verify_area+0xe1/0x2a0 [ 122.439378] vfs_write+0x17f/0x4d0 [ 122.442925] SyS_write+0xf2/0x210 [ 122.446380] ? SyS_read+0x210/0x210 [ 122.450013] ? __do_page_fault+0x159/0xad0 [ 122.454263] ? do_syscall_64+0x4c/0x640 [ 122.458233] ? SyS_read+0x210/0x210 [ 122.462298] do_syscall_64+0x1d5/0x640 [ 122.466199] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 122.471390] RIP: 0033:0x7fc89abe3b5f [ 122.475101] RSP: 002b:00007fc8995a6130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 06:10:51 executing program 0: mq_open(&(0x7f0000000440)='\x00', 0x0, 0x1, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:51 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 06:10:51 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getitimer(0x2, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x90, 0x4, 0x80000001, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x67, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2, {[@noop, @rr={0x7, 0x1b, 0xe4, [@private=0xa010101, @private=0xa010101, @remote, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}]}}}}}) socket(0x8, 0xa, 0x3) 06:10:51 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 1) 06:10:52 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (fail_nth: 1) [ 122.482814] RAX: ffffffffffffffda RBX: 00007fc89ad43f60 RCX: 00007fc89abe3b5f [ 122.490087] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 122.497360] RBP: 00007fc8995a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 122.504632] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 122.511902] R13: 00007ffc7b4e347f R14: 00007fc8995a6300 R15: 0000000000022000 [ 122.558202] FAULT_INJECTION: forcing a failure. [ 122.558202] name failslab, interval 1, probability 0, space 0, times 1 [ 122.573228] CPU: 1 PID: 25139 Comm: syz-executor.5 Not tainted 4.14.270-syzkaller #0 [ 122.581134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.590837] Call Trace: [ 122.593430] dump_stack+0x1b2/0x281 [ 122.597066] should_fail.cold+0x10a/0x149 [ 122.601244] should_failslab+0xd6/0x130 [ 122.605228] kmem_cache_alloc_node+0x263/0x410 [ 122.609818] __alloc_skb+0x5c/0x510 [ 122.613458] vhci_write+0xb1/0x420 [ 122.617004] __vfs_write+0x44c/0x630 [ 122.620727] ? kernel_read+0x110/0x110 [ 122.624632] ? rw_verify_area+0xe1/0x2a0 [ 122.628699] vfs_write+0x17f/0x4d0 [ 122.632250] SyS_write+0xf2/0x210 [ 122.635707] ? SyS_read+0x210/0x210 [ 122.639334] ? __do_page_fault+0x159/0xad0 [ 122.643574] ? do_syscall_64+0x4c/0x640 [ 122.647554] ? SyS_read+0x210/0x210 [ 122.651187] do_syscall_64+0x1d5/0x640 [ 122.655083] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 122.660272] RIP: 0033:0x7f6a58a18b5f [ 122.663980] RSP: 002b:00007f6a573db130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 122.671688] RAX: ffffffffffffffda RBX: 00007f6a58b78f60 RCX: 00007f6a58a18b5f [ 122.678963] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 122.686231] RBP: 00007f6a573db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 122.693507] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 122.700778] R13: 00007ffc2b42182f R14: 00007f6a573db300 R15: 0000000000022000 06:10:52 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 2) 06:10:52 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 06:10:52 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000440)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{0x80000000}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000280)=[{}, {}], 0x2, 0x0, &(0x7f0000000380)=[{}, {}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000580)={0x80000000, &(0x7f00000004c0), &(0x7f0000000500)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000680)={0x80000000, &(0x7f00000005c0), &(0x7f0000000600)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000006c0)={{r1, r2, 0x5, [0xc55, 0x2]}, {0x80000000, r3, 0x0, [0xfd, 0x3]}, 0x8000000, [0xff, 0x22]}) 06:10:52 executing program 0: mq_open(&(0x7f0000000440)='\x00', 0x0, 0x0, &(0x7f00000004c0)={0x4, 0xfffffffffffffffb, 0x2, 0x4}) 06:10:52 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getitimer(0x2, &(0x7f00000000c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x90, 0x4, 0x80000001, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x67, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2, {[@noop, @rr={0x7, 0x1b, 0xe4, [@private=0xa010101, @private=0xa010101, @remote, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}]}}}}}) socket(0x8, 0xa, 0x3) 06:10:52 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 2) 06:10:52 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000440)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{0x80000000}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000280)=[{}, {}], 0x2, 0x0, &(0x7f0000000380)=[{}, {}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000580)={0x80000000, &(0x7f00000004c0), &(0x7f0000000500)=[{}, {{0x80000000, 0x0}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000680)={0x80000000, &(0x7f00000005c0), &(0x7f0000000600)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000006c0)={{r1, r2, 0x5, [0xc55, 0x2]}, {0x80000000, r3, 0x0, [0xfd, 0x3]}, 0x8000000, [0xff, 0x22]}) 06:10:52 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) 06:10:52 executing program 0: mq_open(&(0x7f0000000440)='\x00', 0x0, 0x0, 0x0) 06:10:52 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000440)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{0x80000000}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000280)=[{}, {}], 0x2, 0x0, &(0x7f0000000380)=[{}, {}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000580)={0x80000000, &(0x7f00000004c0), &(0x7f0000000500)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000680)={0x80000000, &(0x7f00000005c0), &(0x7f0000000600)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000006c0)={{r1, r2, 0x5, [0xc55, 0x2]}, {0x80000000, r3, 0x0, [0xfd, 0x3]}, 0x8000000, [0xff, 0x22]}) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000440)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000280)=[{}, {}], 0x2, 0x0, &(0x7f0000000380)=[{}, {}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000580)={0x80000000, &(0x7f00000004c0), &(0x7f0000000500)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000680)={0x80000000, &(0x7f00000005c0), &(0x7f0000000600)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000006c0)={{r1, r2, 0x5, [0xc55, 0x2]}, {0x80000000, r3, 0x0, [0xfd, 0x3]}, 0x8000000, [0xff, 0x22]}) (async) 06:10:52 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) [ 122.792135] FAULT_INJECTION: forcing a failure. [ 122.792135] name failslab, interval 1, probability 0, space 0, times 0 [ 122.801933] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 122.818315] FAULT_INJECTION: forcing a failure. [ 122.818315] name failslab, interval 1, probability 0, space 0, times 0 06:10:52 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) getitimer(0x2, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x90, 0x4, 0x80000001, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x67, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2, {[@noop, @rr={0x7, 0x1b, 0xe4, [@private=0xa010101, @private=0xa010101, @remote, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}]}}}}}) socket(0x8, 0xa, 0x3) [ 122.843760] CPU: 0 PID: 25165 Comm: syz-executor.1 Not tainted 4.14.270-syzkaller #0 [ 122.851671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.861029] Call Trace: [ 122.863623] dump_stack+0x1b2/0x281 [ 122.867351] should_fail.cold+0x10a/0x149 [ 122.871495] should_failslab+0xd6/0x130 [ 122.875464] kmem_cache_alloc_node_trace+0x25a/0x400 [ 122.880561] __kmalloc_node_track_caller+0x38/0x70 [ 122.885480] __alloc_skb+0x96/0x510 [ 122.889108] vhci_write+0xb1/0x420 [ 122.892648] __vfs_write+0x44c/0x630 [ 122.896366] ? kernel_read+0x110/0x110 [ 122.900255] ? rw_verify_area+0xe1/0x2a0 [ 122.904322] vfs_write+0x17f/0x4d0 [ 122.907855] SyS_write+0xf2/0x210 [ 122.911295] ? SyS_read+0x210/0x210 [ 122.914905] ? __do_page_fault+0x159/0xad0 [ 122.919123] ? do_syscall_64+0x4c/0x640 [ 122.923080] ? SyS_read+0x210/0x210 [ 122.926690] do_syscall_64+0x1d5/0x640 [ 122.930570] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 122.935747] RIP: 0033:0x7fc89abe3b5f [ 122.939443] RSP: 002b:00007fc8995a6130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 122.947142] RAX: ffffffffffffffda RBX: 00007fc89ad43f60 RCX: 00007fc89abe3b5f [ 122.954396] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 122.961649] RBP: 00007fc8995a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 122.968901] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 122.976150] R13: 00007ffc7b4e347f R14: 00007fc8995a6300 R15: 0000000000022000 [ 122.983419] CPU: 1 PID: 25174 Comm: syz-executor.5 Not tainted 4.14.270-syzkaller #0 [ 122.991306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.000657] Call Trace: [ 123.003251] dump_stack+0x1b2/0x281 [ 123.006886] should_fail.cold+0x10a/0x149 [ 123.011039] should_failslab+0xd6/0x130 [ 123.015017] kmem_cache_alloc_node_trace+0x25a/0x400 [ 123.020123] __kmalloc_node_track_caller+0x38/0x70 [ 123.025053] __alloc_skb+0x96/0x510 [ 123.028680] vhci_write+0xb1/0x420 [ 123.032241] __vfs_write+0x44c/0x630 [ 123.035956] ? kernel_read+0x110/0x110 [ 123.039855] ? rw_verify_area+0xe1/0x2a0 [ 123.043916] vfs_write+0x17f/0x4d0 [ 123.047455] SyS_write+0xf2/0x210 [ 123.050912] ? SyS_read+0x210/0x210 [ 123.054539] ? __do_page_fault+0x159/0xad0 [ 123.058779] ? do_syscall_64+0x4c/0x640 [ 123.062757] ? SyS_read+0x210/0x210 [ 123.066389] do_syscall_64+0x1d5/0x640 [ 123.070280] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 123.075474] RIP: 0033:0x7f6a58a18b5f [ 123.079182] RSP: 002b:00007f6a573db130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 123.086889] RAX: ffffffffffffffda RBX: 00007f6a58b78f60 RCX: 00007f6a58a18b5f 06:10:52 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 3) 06:10:52 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x3ff, 0xfc, 0x7ff, 0x7}, 0x0) 06:10:52 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 06:10:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) 06:10:52 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getitimer(0x2, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x90, 0x4, 0x80000001, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x67, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2, {[@noop, @rr={0x7, 0x1b, 0xe4, [@private=0xa010101, @private=0xa010101, @remote, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}]}}}}}) socket(0x8, 0xa, 0x3) [ 123.094157] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 123.101429] RBP: 00007f6a573db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 123.108704] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 123.115972] R13: 00007ffc2b42182f R14: 00007f6a573db300 R15: 0000000000022000 [ 123.190406] FAULT_INJECTION: forcing a failure. [ 123.190406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 123.207552] CPU: 1 PID: 25210 Comm: syz-executor.1 Not tainted 4.14.270-syzkaller #0 [ 123.215458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.224814] Call Trace: [ 123.227403] dump_stack+0x1b2/0x281 [ 123.231031] should_fail.cold+0x10a/0x149 [ 123.235188] __alloc_pages_nodemask+0x22c/0x2720 [ 123.239948] ? __lock_acquire+0x5fc/0x3f20 [ 123.244358] ? __lock_acquire+0x5fc/0x3f20 [ 123.248602] ? trace_hardirqs_on+0x10/0x10 [ 123.252836] ? deref_stack_reg+0x124/0x1a0 [ 123.257071] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 123.261922] ? trace_hardirqs_on+0x10/0x10 [ 123.266153] ? deref_stack_reg+0x124/0x1a0 [ 123.270391] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 123.276278] ? __lock_acquire+0x5fc/0x3f20 [ 123.280512] alloc_pages_current+0x155/0x260 [ 123.284918] __pmd_alloc+0x37/0x3f0 [ 123.288545] __handle_mm_fault+0x1398/0x4620 [ 123.292958] ? unwind_get_return_address+0x51/0x90 [ 123.297886] ? vm_insert_page+0x7c0/0x7c0 [ 123.302046] ? mark_held_locks+0xa6/0xf0 [ 123.302944] FAULT_INJECTION: forcing a failure. [ 123.302944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 123.306103] handle_mm_fault+0x455/0x9c0 [ 123.306120] __do_page_fault+0x549/0xad0 [ 123.306132] ? spurious_fault+0x640/0x640 [ 123.306141] ? do_page_fault+0x60/0x500 [ 123.306153] page_fault+0x25/0x50 [ 123.306164] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 123.306169] RSP: 0018:ffff888087fefc20 EFLAGS: 00050202 [ 123.306177] RAX: ffffed101005e352 RBX: 0000000000000004 RCX: 0000000000000004 [ 123.306181] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff8880802f1a88 [ 123.306186] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed101005e351 [ 123.306191] R10: ffff8880802f1a8b R11: ffff8880a7a28600 R12: ffff8880802f1a88 [ 123.306196] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff888092e4df18 [ 123.306216] copyin+0x99/0xc0 06:10:52 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 3) 06:10:52 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 06:10:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) [ 123.387850] _copy_from_iter_full+0x19c/0x760 [ 123.392348] ? check_stack_object+0x86/0xa0 [ 123.396657] ? __phys_addr_symbol+0x1f/0x60 [ 123.400962] ? __check_object_size+0x179/0x230 [ 123.405541] vhci_write+0x143/0x420 [ 123.409169] __vfs_write+0x44c/0x630 [ 123.412885] ? kernel_read+0x110/0x110 [ 123.416774] ? rw_verify_area+0xe1/0x2a0 [ 123.420828] vfs_write+0x17f/0x4d0 [ 123.424363] SyS_write+0xf2/0x210 [ 123.427817] ? SyS_read+0x210/0x210 [ 123.431436] ? __do_page_fault+0x159/0xad0 [ 123.435659] ? do_syscall_64+0x4c/0x640 [ 123.439617] ? SyS_read+0x210/0x210 [ 123.443228] do_syscall_64+0x1d5/0x640 [ 123.447102] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 123.452277] RIP: 0033:0x7fc89abe3b5f [ 123.455982] RSP: 002b:00007fc8995a6130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 123.463675] RAX: ffffffffffffffda RBX: 00007fc89ad43f60 RCX: 00007fc89abe3b5f [ 123.470926] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 123.478177] RBP: 00007fc8995a61d0 R08: 0000000000000000 R09: 0000000000000000 06:10:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) [ 123.485432] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 123.492698] R13: 00007ffc7b4e347f R14: 00007fc8995a6300 R15: 0000000000022000 [ 123.503728] CPU: 0 PID: 25224 Comm: syz-executor.5 Not tainted 4.14.270-syzkaller #0 [ 123.511622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.520969] Call Trace: [ 123.523552] dump_stack+0x1b2/0x281 [ 123.527185] should_fail.cold+0x10a/0x149 [ 123.531332] __alloc_pages_nodemask+0x22c/0x2720 [ 123.536092] ? __lock_acquire+0x5fc/0x3f20 [ 123.540328] ? __lock_acquire+0x5fc/0x3f20 [ 123.544568] ? trace_hardirqs_on+0x10/0x10 [ 123.548806] ? deref_stack_reg+0x124/0x1a0 [ 123.549920] FAULT_INJECTION: forcing a failure. [ 123.549920] name failslab, interval 1, probability 0, space 0, times 0 [ 123.553046] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 123.553056] ? trace_hardirqs_on+0x10/0x10 [ 123.553068] ? deref_stack_reg+0x124/0x1a0 [ 123.553077] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 123.553092] ? __lock_acquire+0x5fc/0x3f20 [ 123.587600] alloc_pages_current+0x155/0x260 [ 123.591994] __pmd_alloc+0x37/0x3f0 [ 123.595606] __handle_mm_fault+0x1398/0x4620 [ 123.599997] ? unwind_get_return_address+0x51/0x90 [ 123.604913] ? vm_insert_page+0x7c0/0x7c0 [ 123.609056] ? mark_held_locks+0xa6/0xf0 [ 123.613103] handle_mm_fault+0x455/0x9c0 [ 123.617158] __do_page_fault+0x549/0xad0 [ 123.621202] ? spurious_fault+0x640/0x640 [ 123.625330] ? do_page_fault+0x60/0x500 [ 123.629294] page_fault+0x25/0x50 [ 123.632731] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 123.638332] RSP: 0018:ffff88807fe37c20 EFLAGS: 00050202 [ 123.643674] RAX: ffffed10127952a2 RBX: 0000000000000004 RCX: 0000000000000004 [ 123.650929] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff888093ca9508 [ 123.658218] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed10127952a1 [ 123.665469] R10: ffff888093ca950b R11: ffff8880a917e280 R12: ffff888093ca9508 [ 123.672719] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff8880b1ad99d8 [ 123.679984] copyin+0x99/0xc0 [ 123.683074] _copy_from_iter_full+0x19c/0x760 [ 123.687548] ? check_stack_object+0x86/0xa0 [ 123.691850] ? __phys_addr_symbol+0x1f/0x60 [ 123.696150] ? __check_object_size+0x179/0x230 [ 123.700713] vhci_write+0x143/0x420 [ 123.704323] __vfs_write+0x44c/0x630 [ 123.708020] ? kernel_read+0x110/0x110 [ 123.711906] ? rw_verify_area+0xe1/0x2a0 [ 123.715950] vfs_write+0x17f/0x4d0 [ 123.719475] SyS_write+0xf2/0x210 [ 123.722926] ? SyS_read+0x210/0x210 [ 123.726540] ? __do_page_fault+0x159/0xad0 [ 123.730757] ? do_syscall_64+0x4c/0x640 [ 123.734711] ? SyS_read+0x210/0x210 [ 123.738317] do_syscall_64+0x1d5/0x640 [ 123.742191] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 123.747361] RIP: 0033:0x7f6a58a18b5f [ 123.751058] RSP: 002b:00007f6a573db130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 123.758748] RAX: ffffffffffffffda RBX: 00007f6a58b78f60 RCX: 00007f6a58a18b5f [ 123.765998] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 123.773247] RBP: 00007f6a573db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 123.780500] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 06:10:52 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x3ff, 0xfc, 0x7ff, 0x7}, 0x0) 06:10:52 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getitimer(0x2, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x90, 0x4, 0x80000001, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x67, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2, {[@noop, @rr={0x7, 0x1b, 0xe4, [@private=0xa010101, @private=0xa010101, @remote, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}]}}}}}) socket(0x8, 0xa, 0x3) 06:10:53 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (fail_nth: 1) [ 123.787755] R13: 00007ffc2b42182f R14: 00007f6a573db300 R15: 0000000000022000 [ 123.795018] CPU: 1 PID: 25233 Comm: syz-executor.4 Not tainted 4.14.270-syzkaller #0 [ 123.802900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.812247] Call Trace: [ 123.814833] dump_stack+0x1b2/0x281 [ 123.818466] should_fail.cold+0x10a/0x149 [ 123.822626] should_failslab+0xd6/0x130 [ 123.826605] kmem_cache_alloc_node+0x263/0x410 [ 123.831186] __alloc_skb+0x5c/0x510 [ 123.834816] vhci_write+0xb1/0x420 [ 123.838358] __vfs_write+0x44c/0x630 [ 123.842079] ? kernel_read+0x110/0x110 [ 123.845980] ? rw_verify_area+0xe1/0x2a0 [ 123.850042] vfs_write+0x17f/0x4d0 [ 123.853582] SyS_write+0xf2/0x210 [ 123.857037] ? SyS_read+0x210/0x210 [ 123.860665] ? __do_page_fault+0x159/0xad0 [ 123.864897] ? do_syscall_64+0x4c/0x640 [ 123.868878] ? SyS_read+0x210/0x210 [ 123.872504] do_syscall_64+0x1d5/0x640 [ 123.876398] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 123.881582] RIP: 0033:0x7fdae84d5b5f [ 123.885283] RSP: 002b:00007fdae6e98130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 06:10:53 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 4) 06:10:53 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getitimer(0x2, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x90, 0x4, 0x80000001, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x67, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2, {[@noop, @rr={0x7, 0x1b, 0xe4, [@private=0xa010101, @private=0xa010101, @remote, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}]}}}}}) socket(0x8, 0xa, 0x3) 06:10:53 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x3ff, 0xfc, 0x7ff, 0x7}, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) mq_getsetattr(r0, &(0x7f0000000040)={0x3ff, 0xfc, 0x7ff, 0x7}, 0x0) (async) 06:10:53 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 4) 06:10:53 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 06:10:53 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (fail_nth: 2) [ 123.892986] RAX: ffffffffffffffda RBX: 00007fdae8635f60 RCX: 00007fdae84d5b5f [ 123.900257] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 123.907525] RBP: 00007fdae6e981d0 R08: 0000000000000000 R09: 0000000000000000 [ 123.914791] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 123.922154] R13: 00007ffe347e97bf R14: 00007fdae6e98300 R15: 0000000000022000 06:10:53 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000008c0)=""/195, 0xc3, 0x1, &(0x7f0000000a40)={r2, r3+10000000}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}}, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000000080)) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000a80)={{0x80000000, 0x0, 0xf, [0x3, 0x5]}, {0x80000000, 0x0, 0x2, [0x43fb, 0xfffff001]}, 0x0, [0x3, 0x3ff]}) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000ac0)=""/80, 0x50, 0x100000001, &(0x7f0000000b80)={r6, r7+10000000}) 06:10:53 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 06:10:53 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getitimer(0x2, &(0x7f00000000c0)) socket(0x8, 0xa, 0x3) [ 123.993042] FAULT_INJECTION: forcing a failure. [ 123.993042] name failslab, interval 1, probability 0, space 0, times 0 [ 124.006360] FAULT_INJECTION: forcing a failure. [ 124.006360] name failslab, interval 1, probability 0, space 0, times 0 [ 124.018330] FAULT_INJECTION: forcing a failure. [ 124.018330] name failslab, interval 1, probability 0, space 0, times 0 06:10:53 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000008c0)=""/195, 0xc3, 0x1, &(0x7f0000000a40)={r2, r3+10000000}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}}, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000000080)) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000a80)={{0x80000000, 0x0, 0xf, [0x3, 0x5]}, {0x80000000, 0x0, 0x2, [0x43fb, 0xfffff001]}, 0x0, [0x3, 0x3ff]}) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000ac0)=""/80, 0x50, 0x100000001, &(0x7f0000000b80)={r6, r7+10000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), 0xffffffffffffffff) (async) clock_gettime(0x0, &(0x7f0000000a00)) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f00000008c0)=""/195, 0xc3, 0x1, &(0x7f0000000a40)={r2, r3+10000000}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}}, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) (async) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000000080)) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000a80)={{0x80000000, 0x0, 0xf, [0x3, 0x5]}, {0x80000000, 0x0, 0x2, [0x43fb, 0xfffff001]}, 0x0, [0x3, 0x3ff]}) (async) clock_gettime(0x0, &(0x7f0000000b40)) (async) mq_timedreceive(r0, &(0x7f0000000ac0)=""/80, 0x50, 0x100000001, &(0x7f0000000b80)={r6, r7+10000000}) (async) [ 124.036035] CPU: 1 PID: 25258 Comm: syz-executor.5 Not tainted 4.14.270-syzkaller #0 [ 124.043946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.053296] Call Trace: [ 124.055890] dump_stack+0x1b2/0x281 [ 124.059522] should_fail.cold+0x10a/0x149 [ 124.063673] should_failslab+0xd6/0x130 [ 124.067645] kmem_cache_alloc+0x28e/0x3c0 [ 124.071829] __pmd_alloc+0xaf/0x3f0 [ 124.075465] __handle_mm_fault+0x1398/0x4620 [ 124.079881] ? unwind_get_return_address+0x51/0x90 [ 124.084810] ? vm_insert_page+0x7c0/0x7c0 [ 124.088968] ? mark_held_locks+0xa6/0xf0 [ 124.093031] handle_mm_fault+0x455/0x9c0 [ 124.097094] __do_page_fault+0x549/0xad0 [ 124.101160] ? spurious_fault+0x640/0x640 [ 124.105307] ? do_page_fault+0x60/0x500 [ 124.109283] page_fault+0x25/0x50 [ 124.112738] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 124.118358] RSP: 0018:ffff88809e227c20 EFLAGS: 00050202 [ 124.123728] RAX: ffffed1016a0746a RBX: 0000000000000004 RCX: 0000000000000004 [ 124.130996] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff8880b503a348 [ 124.138265] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed1016a07469 [ 124.145537] R10: ffff8880b503a34b R11: ffff8880a972e480 R12: ffff8880b503a348 [ 124.152808] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff88809675f498 [ 124.160103] copyin+0x99/0xc0 [ 124.163217] _copy_from_iter_full+0x19c/0x760 [ 124.167719] ? check_stack_object+0x86/0xa0 [ 124.172054] ? __phys_addr_symbol+0x1f/0x60 [ 124.176382] ? __check_object_size+0x179/0x230 [ 124.180972] vhci_write+0x143/0x420 [ 124.184608] __vfs_write+0x44c/0x630 [ 124.188324] ? kernel_read+0x110/0x110 06:10:53 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), 0xffffffffffffffff) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000008c0)=""/195, 0xc3, 0x1, &(0x7f0000000a40)={r2, r3+10000000}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}}, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) (async) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000000080)) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000a80)={{0x80000000, 0x0, 0xf, [0x3, 0x5]}, {0x80000000, 0x0, 0x2, [0x43fb, 0xfffff001]}, 0x0, [0x3, 0x3ff]}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) (rerun: 32) mq_timedreceive(r0, &(0x7f0000000ac0)=""/80, 0x50, 0x100000001, &(0x7f0000000b80)={r6, r7+10000000}) 06:10:53 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x8, 0xa, 0x3) [ 124.192230] ? rw_verify_area+0xe1/0x2a0 [ 124.196308] vfs_write+0x17f/0x4d0 [ 124.199859] SyS_write+0xf2/0x210 [ 124.203315] ? SyS_read+0x210/0x210 [ 124.206949] ? __do_page_fault+0x159/0xad0 [ 124.211185] ? do_syscall_64+0x4c/0x640 [ 124.215160] ? SyS_read+0x210/0x210 [ 124.218805] do_syscall_64+0x1d5/0x640 [ 124.222704] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 124.227893] RIP: 0033:0x7f6a58a18b5f [ 124.231605] RSP: 002b:00007f6a573db130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 124.239319] RAX: ffffffffffffffda RBX: 00007f6a58b78f60 RCX: 00007f6a58a18b5f [ 124.246586] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 124.253857] RBP: 00007f6a573db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 124.261131] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 124.268401] R13: 00007ffc2b42182f R14: 00007f6a573db300 R15: 0000000000022000 [ 124.281136] CPU: 1 PID: 25259 Comm: syz-executor.1 Not tainted 4.14.270-syzkaller #0 [ 124.289045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.298400] Call Trace: [ 124.300992] dump_stack+0x1b2/0x281 [ 124.304628] should_fail.cold+0x10a/0x149 [ 124.308782] should_failslab+0xd6/0x130 [ 124.312763] kmem_cache_alloc+0x28e/0x3c0 [ 124.316917] __pmd_alloc+0xaf/0x3f0 [ 124.320553] __handle_mm_fault+0x1398/0x4620 [ 124.324974] ? unwind_get_return_address+0x51/0x90 [ 124.329909] ? vm_insert_page+0x7c0/0x7c0 [ 124.334074] ? mark_held_locks+0xa6/0xf0 [ 124.338141] handle_mm_fault+0x455/0x9c0 [ 124.342208] __do_page_fault+0x549/0xad0 [ 124.346277] ? spurious_fault+0x640/0x640 [ 124.350428] ? do_page_fault+0x60/0x500 [ 124.354406] page_fault+0x25/0x50 [ 124.357864] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 124.363483] RSP: 0018:ffff888087e87c20 EFLAGS: 00050202 [ 124.368842] RAX: ffffed1013746c02 RBX: 0000000000000004 RCX: 0000000000000004 [ 124.376108] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff88809ba36008 [ 124.383379] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed1013746c01 [ 124.390649] R10: ffff88809ba3600b R11: ffff8880a152c180 R12: ffff88809ba36008 [ 124.397916] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff8880b4a2b998 [ 124.405201] copyin+0x99/0xc0 [ 124.408305] _copy_from_iter_full+0x19c/0x760 [ 124.412799] ? check_stack_object+0x86/0xa0 [ 124.417114] ? __phys_addr_symbol+0x1f/0x60 [ 124.421421] ? __check_object_size+0x179/0x230 [ 124.425999] vhci_write+0x143/0x420 [ 124.429615] __vfs_write+0x44c/0x630 [ 124.433312] ? kernel_read+0x110/0x110 [ 124.437187] ? rw_verify_area+0xe1/0x2a0 [ 124.441230] vfs_write+0x17f/0x4d0 [ 124.444761] SyS_write+0xf2/0x210 [ 124.448202] ? SyS_read+0x210/0x210 [ 124.451815] ? __do_page_fault+0x159/0xad0 [ 124.456034] ? do_syscall_64+0x4c/0x640 [ 124.460275] ? SyS_read+0x210/0x210 [ 124.463909] do_syscall_64+0x1d5/0x640 [ 124.467795] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 124.472983] RIP: 0033:0x7fc89abe3b5f [ 124.476674] RSP: 002b:00007fc8995a6130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 124.484367] RAX: ffffffffffffffda RBX: 00007fc89ad43f60 RCX: 00007fc89abe3b5f [ 124.491626] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 124.498879] RBP: 00007fc8995a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 124.506133] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 124.513394] R13: 00007ffc7b4e347f R14: 00007fc8995a6300 R15: 0000000000022000 [ 124.520724] CPU: 0 PID: 25260 Comm: syz-executor.4 Not tainted 4.14.270-syzkaller #0 [ 124.528618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.537972] Call Trace: [ 124.540567] dump_stack+0x1b2/0x281 [ 124.544205] should_fail.cold+0x10a/0x149 [ 124.548361] should_failslab+0xd6/0x130 [ 124.552341] kmem_cache_alloc_node_trace+0x25a/0x400 [ 124.557441] __kmalloc_node_track_caller+0x38/0x70 [ 124.562352] __alloc_skb+0x96/0x510 [ 124.565983] vhci_write+0xb1/0x420 [ 124.569505] __vfs_write+0x44c/0x630 [ 124.573198] ? kernel_read+0x110/0x110 [ 124.577079] ? rw_verify_area+0xe1/0x2a0 [ 124.581272] vfs_write+0x17f/0x4d0 [ 124.584792] SyS_write+0xf2/0x210 [ 124.588221] ? SyS_read+0x210/0x210 [ 124.591824] ? __do_page_fault+0x159/0xad0 [ 124.596036] ? do_syscall_64+0x4c/0x640 [ 124.599989] ? SyS_read+0x210/0x210 [ 124.603609] do_syscall_64+0x1d5/0x640 [ 124.607496] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 124.612676] RIP: 0033:0x7fdae84d5b5f [ 124.616368] RSP: 002b:00007fdae6e98130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 124.624052] RAX: ffffffffffffffda RBX: 00007fdae8635f60 RCX: 00007fdae84d5b5f [ 124.631325] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 124.638574] RBP: 00007fdae6e981d0 R08: 0000000000000000 R09: 0000000000000000 06:10:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 5) 06:10:54 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x8, 0xa, 0x3) 06:10:54 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 06:10:54 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x4000010, r0, 0x6) mq_timedsend(0xffffffffffffffff, 0x0, 0xc49696659124e56f, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14) 06:10:54 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 5) 06:10:54 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (fail_nth: 3) [ 124.645820] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 124.653069] R13: 00007ffe347e97bf R14: 00007fdae6e98300 R15: 0000000000022000 [ 124.683808] FAULT_INJECTION: forcing a failure. [ 124.683808] name failslab, interval 1, probability 0, space 0, times 0 [ 124.720733] FAULT_INJECTION: forcing a failure. [ 124.720733] name failslab, interval 1, probability 0, space 0, times 0 [ 124.724041] CPU: 1 PID: 25311 Comm: syz-executor.1 Not tainted 4.14.270-syzkaller #0 [ 124.739832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.749185] Call Trace: [ 124.751779] dump_stack+0x1b2/0x281 [ 124.755424] should_fail.cold+0x10a/0x149 [ 124.759579] should_failslab+0xd6/0x130 [ 124.763555] kmem_cache_alloc+0x28e/0x3c0 [ 124.767702] __anon_vma_prepare+0x5d/0x4f0 [ 124.771933] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 124.777032] ? __lockdep_init_map+0x100/0x560 [ 124.781530] ? prep_transhuge_page+0xa0/0xa0 [ 124.785937] ? _raw_spin_unlock+0x29/0x40 [ 124.790078] ? __pmd_alloc+0x27f/0x3f0 [ 124.793958] __handle_mm_fault+0x2ac4/0x4620 [ 124.798362] ? unwind_get_return_address+0x51/0x90 [ 124.803284] ? vm_insert_page+0x7c0/0x7c0 [ 124.807429] ? mark_held_locks+0xa6/0xf0 [ 124.811489] handle_mm_fault+0x455/0x9c0 [ 124.815543] __do_page_fault+0x549/0xad0 [ 124.819611] ? spurious_fault+0x640/0x640 [ 124.823777] ? do_page_fault+0x60/0x500 [ 124.827753] page_fault+0x25/0x50 [ 124.831206] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 124.836821] RSP: 0018:ffff888091f1fc20 EFLAGS: 00050202 [ 124.842178] RAX: ffffed1016043ba2 RBX: 0000000000000004 RCX: 0000000000000004 [ 124.849445] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff8880b021dd08 [ 124.856720] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed1016043ba1 [ 124.864453] R10: ffff8880b021dd0b R11: ffff88808f5b8000 R12: ffff8880b021dd08 [ 124.871719] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff8880b32dac98 [ 124.878998] copyin+0x99/0xc0 [ 124.882101] _copy_from_iter_full+0x19c/0x760 [ 124.886593] ? check_stack_object+0x86/0xa0 [ 124.890916] ? __phys_addr_symbol+0x1f/0x60 [ 124.895232] ? __check_object_size+0x179/0x230 [ 124.899817] vhci_write+0x143/0x420 [ 124.903446] __vfs_write+0x44c/0x630 [ 124.907155] ? kernel_read+0x110/0x110 [ 124.911066] ? rw_verify_area+0xe1/0x2a0 [ 124.915120] vfs_write+0x17f/0x4d0 [ 124.918660] SyS_write+0xf2/0x210 [ 124.922107] ? SyS_read+0x210/0x210 [ 124.925734] ? __do_page_fault+0x159/0xad0 [ 124.929959] ? do_syscall_64+0x4c/0x640 [ 124.933916] ? SyS_read+0x210/0x210 [ 124.937525] do_syscall_64+0x1d5/0x640 [ 124.941400] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 124.946573] RIP: 0033:0x7fc89abe3b5f [ 124.950262] RSP: 002b:00007fc8995a6130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 124.957949] RAX: ffffffffffffffda RBX: 00007fc89ad43f60 RCX: 00007fc89abe3b5f [ 124.965198] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 124.972446] RBP: 00007fc8995a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 124.979697] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 124.986950] R13: 00007ffc7b4e347f R14: 00007fc8995a6300 R15: 0000000000022000 [ 124.994214] CPU: 0 PID: 25321 Comm: syz-executor.5 Not tainted 4.14.270-syzkaller #0 [ 125.002098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.004906] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 125.011473] Call Trace: [ 125.011489] dump_stack+0x1b2/0x281 [ 125.011504] should_fail.cold+0x10a/0x149 [ 125.011516] should_failslab+0xd6/0x130 [ 125.011529] kmem_cache_alloc+0x28e/0x3c0 [ 125.036587] __anon_vma_prepare+0x5d/0x4f0 [ 125.040829] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 125.045935] ? __lockdep_init_map+0x100/0x560 [ 125.050435] ? prep_transhuge_page+0xa0/0xa0 [ 125.054842] ? _raw_spin_unlock+0x29/0x40 [ 125.057935] FAULT_INJECTION: forcing a failure. [ 125.057935] name failslab, interval 1, probability 0, space 0, times 0 [ 125.058982] ? __pmd_alloc+0x27f/0x3f0 [ 125.058995] __handle_mm_fault+0x2ac4/0x4620 [ 125.059008] ? unwind_get_return_address+0x51/0x90 [ 125.059021] ? vm_insert_page+0x7c0/0x7c0 [ 125.087504] ? mark_held_locks+0xa6/0xf0 [ 125.091564] handle_mm_fault+0x455/0x9c0 [ 125.095625] __do_page_fault+0x549/0xad0 [ 125.099676] ? spurious_fault+0x640/0x640 [ 125.103807] ? do_page_fault+0x60/0x500 [ 125.107768] page_fault+0x25/0x50 [ 125.111211] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 125.116819] RSP: 0018:ffff888087fc7c20 EFLAGS: 00050202 [ 125.122171] RAX: ffffed10142a8e52 RBX: 0000000000000004 RCX: 0000000000000004 [ 125.129427] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff8880a1547288 [ 125.136683] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed10142a8e51 [ 125.143948] R10: ffff8880a154728b R11: ffff8880a4fd84c0 R12: ffff8880a1547288 [ 125.151211] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff8880b40c14d8 [ 125.158486] copyin+0x99/0xc0 [ 125.161583] _copy_from_iter_full+0x19c/0x760 [ 125.166068] ? check_stack_object+0x86/0xa0 [ 125.170388] ? __phys_addr_symbol+0x1f/0x60 [ 125.174707] ? __check_object_size+0x179/0x230 [ 125.179283] vhci_write+0x143/0x420 [ 125.182905] __vfs_write+0x44c/0x630 [ 125.186617] ? kernel_read+0x110/0x110 [ 125.190508] ? rw_verify_area+0xe1/0x2a0 [ 125.194568] vfs_write+0x17f/0x4d0 [ 125.198890] SyS_write+0xf2/0x210 [ 125.202333] ? SyS_read+0x210/0x210 [ 125.205942] ? __do_page_fault+0x159/0xad0 [ 125.210158] ? do_syscall_64+0x4c/0x640 [ 125.214116] ? SyS_read+0x210/0x210 [ 125.217745] do_syscall_64+0x1d5/0x640 [ 125.221622] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 125.226794] RIP: 0033:0x7f6a58a18b5f [ 125.230491] RSP: 002b:00007f6a573db130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 125.238181] RAX: ffffffffffffffda RBX: 00007f6a58b78f60 RCX: 00007f6a58a18b5f [ 125.245448] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 125.252697] RBP: 00007f6a573db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 125.259947] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 06:10:54 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x4000010, r0, 0x6) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0xc49696659124e56f, 0x2, 0x0) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14) 06:10:54 executing program 0: socket(0x8, 0xa, 0x3) 06:10:54 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000000)=[0x0, 0x997, 0x7c0002, 0x5, 0x0, 0x1000, 0x7]) 06:10:54 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000000)=[0x0, 0x997, 0x7c0002, 0x5, 0x0, 0x1000, 0x7]) 06:10:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 6) 06:10:54 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000000)=[0x0, 0x997, 0x7c0002, 0x5, 0x0, 0x1000, 0x7]) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000000)=[0x0, 0x997, 0x7c0002, 0x5, 0x0, 0x1000, 0x7]) (async) 06:10:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:10:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:10:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:10:54 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x10400) [ 125.267202] R13: 00007ffc2b42182f R14: 00007f6a573db300 R15: 0000000000022000 [ 125.274494] CPU: 1 PID: 25340 Comm: syz-executor.1 Not tainted 4.14.270-syzkaller #0 [ 125.282378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.291726] Call Trace: [ 125.294310] dump_stack+0x1b2/0x281 [ 125.297939] should_fail.cold+0x10a/0x149 [ 125.302089] should_failslab+0xd6/0x130 [ 125.306065] kmem_cache_alloc+0x28e/0x3c0 [ 125.310215] __anon_vma_prepare+0x2bc/0x4f0 [ 125.314543] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 125.319656] ? __lockdep_init_map+0x100/0x560 [ 125.324155] ? prep_transhuge_page+0xa0/0xa0 [ 125.328562] ? _raw_spin_unlock+0x29/0x40 [ 125.332749] ? __pmd_alloc+0x27f/0x3f0 [ 125.336641] __handle_mm_fault+0x2ac4/0x4620 [ 125.341056] ? unwind_get_return_address+0x51/0x90 [ 125.345983] ? vm_insert_page+0x7c0/0x7c0 [ 125.350144] ? mark_held_locks+0xa6/0xf0 [ 125.354208] handle_mm_fault+0x455/0x9c0 [ 125.358267] __do_page_fault+0x549/0xad0 [ 125.362736] ? spurious_fault+0x640/0x640 [ 125.366889] ? do_page_fault+0x60/0x500 [ 125.370864] page_fault+0x25/0x50 [ 125.374314] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 125.379927] RSP: 0018:ffff88808545fc20 EFLAGS: 00050202 [ 125.385282] RAX: ffffed10143412a2 RBX: 0000000000000004 RCX: 0000000000000004 [ 125.392542] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff8880a1a09508 [ 125.399813] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed10143412a1 [ 125.407081] R10: ffff8880a1a0950b R11: ffff888087f68180 R12: ffff8880a1a09508 [ 125.414345] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff88809dddcf18 [ 125.421628] copyin+0x99/0xc0 [ 125.424734] _copy_from_iter_full+0x19c/0x760 [ 125.429225] ? check_stack_object+0x86/0xa0 [ 125.433541] ? __phys_addr_symbol+0x1f/0x60 [ 125.437855] ? __check_object_size+0x179/0x230 [ 125.442438] vhci_write+0x143/0x420 [ 125.446065] __vfs_write+0x44c/0x630 [ 125.449786] ? kernel_read+0x110/0x110 [ 125.453684] ? rw_verify_area+0xe1/0x2a0 [ 125.457752] vfs_write+0x17f/0x4d0 [ 125.461290] SyS_write+0xf2/0x210 [ 125.464747] ? SyS_read+0x210/0x210 [ 125.468365] ? __do_page_fault+0x159/0xad0 06:10:54 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 6) 06:10:54 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x10400) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x10400) (async) [ 125.472594] ? do_syscall_64+0x4c/0x640 [ 125.476564] ? SyS_read+0x210/0x210 [ 125.480195] do_syscall_64+0x1d5/0x640 [ 125.484092] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 125.489277] RIP: 0033:0x7fc89abe3b5f [ 125.492984] RSP: 002b:00007fc8995a6130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 125.500689] RAX: ffffffffffffffda RBX: 00007fc89ad43f60 RCX: 00007fc89abe3b5f [ 125.507953] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 125.515216] RBP: 00007fc8995a61d0 R08: 0000000000000000 R09: 0000000000000000 06:10:55 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x4000010, r0, 0x6) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0xc49696659124e56f, 0x2, 0x0) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14) 06:10:55 executing program 0: socket(0x0, 0xa, 0x3) 06:10:55 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) tgkill(0xffffffffffffffff, r1, 0x1b) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESDEC], 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000002c0)={r0, 0x5}) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfc}, "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"}, 0x100) 06:10:55 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x10400) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x10400) (async) 06:10:55 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 7) [ 125.520595] FAULT_INJECTION: forcing a failure. [ 125.520595] name failslab, interval 1, probability 0, space 0, times 0 [ 125.522475] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 125.522481] R13: 00007ffc7b4e347f R14: 00007fc8995a6300 R15: 0000000000022000 06:10:55 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) tgkill(0xffffffffffffffff, r1, 0x1b) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), 0x4) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESDEC], 0x4) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000002c0)={r0, 0x5}) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfc}, "9d9fa83470b465abf8f79bffc78dfd011d055184acf2079f4c0bf75c116c119c15232ac438e34dc0bcfca9d02e48075801f04671c8d632012a35728f1889fb127702f7433f965e9c9db4775985567d816be620d2488578f6985b6ffa1d97a7bbb54e34efd294dfd5a714d5b0b953a3437502276213fbe916bf76d1f47536d42bfed5b06fa9cdc4d7b4476a1b677ceb60c7cd220d1ec8d50e65cc78f2643e221d3e57ad1820bf777618a0212a3df9a2a83b9237c8f31087b3134b0890e52df5e626ac4aaf0e7cca5cff3cf861f984c8c296930cc6d046a175a87aeced718898d4a7ae5bf85acdcafb6c6d1b600446dad6b5145a010ef70667757d6765"}, 0x100) 06:10:55 executing program 0: socket(0x0, 0xa, 0x3) 06:10:55 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1, 0x3, 0x6, 0x10, "6e43bb057264907f3e4ba4cc7ffb0d48b309a2b481bed9a6617d25889d20ee4886cd89c9a874d5ea26dcb90abe5910c2d2e925b07e7ed0aa46ac2261d8a86380", "cf8a21b78de9c5a1d444f9adaf38f93272a1305b3e403af209a8ec9c6b87de91", [0x0, 0x1]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x2e, 0x2, 0x0) 06:10:55 executing program 3: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xff, 0x80000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x30}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc8c1) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x0, 0x47, 0x1, '\x00', &(0x7f0000000180)=0x31}) [ 125.606329] FAULT_INJECTION: forcing a failure. [ 125.606329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.649682] CPU: 1 PID: 25390 Comm: syz-executor.1 Not tainted 4.14.270-syzkaller #0 [ 125.657586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.666930] Call Trace: [ 125.669519] dump_stack+0x1b2/0x281 [ 125.673145] should_fail.cold+0x10a/0x149 [ 125.677289] __alloc_pages_nodemask+0x22c/0x2720 [ 125.682039] ? vfs_write+0x17f/0x4d0 [ 125.685753] ? SyS_write+0xf2/0x210 [ 125.689379] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 125.694742] ? trace_hardirqs_on+0x10/0x10 [ 125.698978] ? SyS_write+0xf2/0x210 [ 125.702595] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 125.707430] ? trace_hardirqs_on+0x10/0x10 [ 125.711665] ? __lock_acquire+0x5fc/0x3f20 [ 125.715899] ? __anon_vma_prepare+0x28f/0x4f0 [ 125.720385] ? lock_acquire+0x170/0x3f0 [ 125.724350] ? lock_downgrade+0x740/0x740 [ 125.728490] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 125.734023] alloc_pages_current+0x155/0x260 [ 125.738426] pte_alloc_one+0x15/0x100 [ 125.742213] do_huge_pmd_anonymous_page+0x500/0x1700 [ 125.747309] ? __lockdep_init_map+0x100/0x560 [ 125.751805] ? prep_transhuge_page+0xa0/0xa0 [ 125.756207] ? _raw_spin_unlock+0x29/0x40 [ 125.760349] ? __pmd_alloc+0x27f/0x3f0 [ 125.764235] __handle_mm_fault+0x2ac4/0x4620 [ 125.768653] ? unwind_get_return_address+0x51/0x90 [ 125.773574] ? vm_insert_page+0x7c0/0x7c0 [ 125.777719] ? mark_held_locks+0xa6/0xf0 [ 125.781768] handle_mm_fault+0x455/0x9c0 [ 125.785813] __do_page_fault+0x549/0xad0 [ 125.789857] ? spurious_fault+0x640/0x640 [ 125.793985] ? do_page_fault+0x60/0x500 06:10:55 executing program 3: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xff, 0x80000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x30}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc8c1) (async) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x0, 0x47, 0x1, '\x00', &(0x7f0000000180)=0x31}) [ 125.797946] page_fault+0x25/0x50 [ 125.801385] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 125.807005] RSP: 0018:ffff888091f1fc20 EFLAGS: 00050202 [ 125.812348] RAX: ffffed1012b0939a RBX: 0000000000000004 RCX: 0000000000000004 [ 125.819599] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff888095849cc8 [ 125.826857] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed1012b09399 [ 125.834117] R10: ffff888095849ccb R11: ffff888087c7c280 R12: ffff888095849cc8 [ 125.841380] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff88809675f858 [ 125.848662] copyin+0x99/0xc0 [ 125.851758] _copy_from_iter_full+0x19c/0x760 [ 125.856240] ? check_stack_object+0x86/0xa0 [ 125.860552] ? __phys_addr_symbol+0x1f/0x60 [ 125.864872] ? __check_object_size+0x179/0x230 [ 125.869451] vhci_write+0x143/0x420 [ 125.873071] __vfs_write+0x44c/0x630 [ 125.876823] ? kernel_read+0x110/0x110 [ 125.880715] ? rw_verify_area+0xe1/0x2a0 [ 125.884768] vfs_write+0x17f/0x4d0 [ 125.888300] SyS_write+0xf2/0x210 [ 125.891739] ? SyS_read+0x210/0x210 [ 125.895355] ? __do_page_fault+0x159/0xad0 [ 125.899613] ? do_syscall_64+0x4c/0x640 [ 125.903587] ? SyS_read+0x210/0x210 [ 125.907215] do_syscall_64+0x1d5/0x640 [ 125.911102] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 125.916278] RIP: 0033:0x7fc89abe3b5f [ 125.919981] RSP: 002b:00007fc8995a6130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 125.927678] RAX: ffffffffffffffda RBX: 00007fc89ad43f60 RCX: 00007fc89abe3b5f [ 125.934941] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 125.942203] RBP: 00007fc8995a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 125.949461] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 125.956720] R13: 00007ffc7b4e347f R14: 00007fc8995a6300 R15: 0000000000022000 [ 125.976593] CPU: 0 PID: 25374 Comm: syz-executor.5 Not tainted 4.14.270-syzkaller #0 [ 125.984497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.993849] Call Trace: [ 125.996435] dump_stack+0x1b2/0x281 [ 126.000066] should_fail.cold+0x10a/0x149 [ 126.004219] should_failslab+0xd6/0x130 [ 126.008198] kmem_cache_alloc+0x28e/0x3c0 [ 126.012354] __anon_vma_prepare+0x2bc/0x4f0 [ 126.016689] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 126.021791] ? __lockdep_init_map+0x100/0x560 [ 126.026268] ? prep_transhuge_page+0xa0/0xa0 [ 126.030654] ? _raw_spin_unlock+0x29/0x40 [ 126.034776] ? __pmd_alloc+0x27f/0x3f0 [ 126.038649] __handle_mm_fault+0x2ac4/0x4620 [ 126.043041] ? unwind_get_return_address+0x51/0x90 [ 126.047946] ? vm_insert_page+0x7c0/0x7c0 [ 126.052079] ? mark_held_locks+0xa6/0xf0 [ 126.056119] handle_mm_fault+0x455/0x9c0 [ 126.060167] __do_page_fault+0x549/0xad0 [ 126.064208] ? spurious_fault+0x640/0x640 [ 126.068338] ? do_page_fault+0x60/0x500 [ 126.072294] page_fault+0x25/0x50 [ 126.075728] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 126.081327] RSP: 0018:ffff888087647c20 EFLAGS: 00050202 [ 126.086669] RAX: ffffed1013c8cb52 RBX: 0000000000000004 RCX: 0000000000000004 [ 126.093919] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff88809e465a88 [ 126.101185] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed1013c8cb51 [ 126.108433] R10: ffff88809e465a8b R11: ffff8880a1100540 R12: ffff88809e465a88 [ 126.115681] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff88809e92ee18 [ 126.122944] copyin+0x99/0xc0 [ 126.126035] _copy_from_iter_full+0x19c/0x760 [ 126.130507] ? check_stack_object+0x86/0xa0 [ 126.134806] ? __phys_addr_symbol+0x1f/0x60 [ 126.139109] ? __check_object_size+0x179/0x230 [ 126.143693] vhci_write+0x143/0x420 [ 126.147299] __vfs_write+0x44c/0x630 [ 126.150989] ? kernel_read+0x110/0x110 [ 126.154858] ? rw_verify_area+0xe1/0x2a0 [ 126.158895] vfs_write+0x17f/0x4d0 [ 126.162413] SyS_write+0xf2/0x210 [ 126.165843] ? SyS_read+0x210/0x210 [ 126.169446] ? __do_page_fault+0x159/0xad0 [ 126.173659] ? do_syscall_64+0x4c/0x640 [ 126.177611] ? SyS_read+0x210/0x210 [ 126.181217] do_syscall_64+0x1d5/0x640 [ 126.185087] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 126.190271] RIP: 0033:0x7f6a58a18b5f [ 126.193958] RSP: 002b:00007f6a573db130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 06:10:55 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 7) 06:10:55 executing program 3: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xff, 0x80000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x30}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc8c1) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x0, 0x47, 0x1, '\x00', &(0x7f0000000180)=0x31}) socket$l2tp(0x2, 0x2, 0x73) (async) syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xff, 0x80000}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x30}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc8c1) (async) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x0, 0x47, 0x1, '\x00', &(0x7f0000000180)=0x31}) (async) 06:10:55 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1, 0x3, 0x6, 0x10, "6e43bb057264907f3e4ba4cc7ffb0d48b309a2b481bed9a6617d25889d20ee4886cd89c9a874d5ea26dcb90abe5910c2d2e925b07e7ed0aa46ac2261d8a86380", "cf8a21b78de9c5a1d444f9adaf38f93272a1305b3e403af209a8ec9c6b87de91", [0x0, 0x1]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x2e, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) (async) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1, 0x3, 0x6, 0x10, "6e43bb057264907f3e4ba4cc7ffb0d48b309a2b481bed9a6617d25889d20ee4886cd89c9a874d5ea26dcb90abe5910c2d2e925b07e7ed0aa46ac2261d8a86380", "cf8a21b78de9c5a1d444f9adaf38f93272a1305b3e403af209a8ec9c6b87de91", [0x0, 0x1]}) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x2e, 0x2, 0x0) (async) 06:10:55 executing program 0: socket(0x0, 0xa, 0x3) 06:10:55 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) tgkill(0xffffffffffffffff, r1, 0x1b) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESDEC], 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000002c0)={r0, 0x5}) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfc}, "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"}, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) (async) tgkill(0xffffffffffffffff, r1, 0x1b) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), 0x4) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESDEC], 0x4) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000002c0)={r0, 0x5}) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfc}, "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"}, 0x100) (async) 06:10:55 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 8) [ 126.201640] RAX: ffffffffffffffda RBX: 00007f6a58b78f60 RCX: 00007f6a58a18b5f [ 126.208887] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 126.216133] RBP: 00007f6a573db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 126.223381] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 126.230649] R13: 00007ffc2b42182f R14: 00007f6a573db300 R15: 0000000000022000 06:10:55 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x19, 0x0, @thr={&(0x7f0000000080)="f9d006aa55b67a920f68d249fb47847dd8f727144508e6c013251d947a81e52995d6d9662a3c21c5d7346780b9fe3ba759eb1d97c4c4a443a456e40c2870f0bc18622993c223770b3ce90d9ac6a7000da117ba2bb4d9216d609c82c0486c0a955a2a14cde23a75af98adb118f1b6fd1ff11bd0965e0d0cf16891c770afb57ef54e8d6d39474490bed40b3aba633046b85b2dde4a043140d74edfbd63124c2c0bcd35076ff34b611967eddfaafc94951903f9efc9473e9f19f248bb025e60a9ea90ff12baee44c81195e3", &(0x7f0000000180)="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"}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r0, 0x6}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001180), 0x2, 0x0) [ 126.297534] FAULT_INJECTION: forcing a failure. [ 126.297534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.312330] FAULT_INJECTION: forcing a failure. [ 126.312330] name failslab, interval 1, probability 0, space 0, times 0 [ 126.330375] CPU: 0 PID: 25430 Comm: syz-executor.5 Not tainted 4.14.270-syzkaller #0 [ 126.338280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.347635] Call Trace: [ 126.350232] dump_stack+0x1b2/0x281 [ 126.353879] should_fail.cold+0x10a/0x149 [ 126.358037] __alloc_pages_nodemask+0x22c/0x2720 [ 126.362806] ? vfs_write+0x17f/0x4d0 [ 126.366523] ? SyS_write+0xf2/0x210 [ 126.370156] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 126.375529] ? trace_hardirqs_on+0x10/0x10 [ 126.379774] ? SyS_write+0xf2/0x210 [ 126.383407] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 126.388251] ? trace_hardirqs_on+0x10/0x10 [ 126.392561] ? __lock_acquire+0x5fc/0x3f20 [ 126.396802] ? __anon_vma_prepare+0x28f/0x4f0 [ 126.401307] ? lock_acquire+0x170/0x3f0 [ 126.405284] ? lock_downgrade+0x740/0x740 [ 126.409434] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 126.414887] alloc_pages_current+0x155/0x260 [ 126.419426] pte_alloc_one+0x15/0x100 [ 126.423227] do_huge_pmd_anonymous_page+0x500/0x1700 [ 126.428333] ? __lockdep_init_map+0x100/0x560 [ 126.432840] ? prep_transhuge_page+0xa0/0xa0 [ 126.437254] ? _raw_spin_unlock+0x29/0x40 [ 126.441398] ? __pmd_alloc+0x27f/0x3f0 [ 126.445368] __handle_mm_fault+0x2ac4/0x4620 [ 126.449781] ? unwind_get_return_address+0x51/0x90 [ 126.454709] ? vm_insert_page+0x7c0/0x7c0 [ 126.458865] ? mark_held_locks+0xa6/0xf0 [ 126.462935] handle_mm_fault+0x455/0x9c0 [ 126.467000] __do_page_fault+0x549/0xad0 [ 126.471066] ? spurious_fault+0x640/0x640 [ 126.475814] ? do_page_fault+0x60/0x500 [ 126.479774] page_fault+0x25/0x50 [ 126.483215] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 126.488817] RSP: 0018:ffff88809235fc20 EFLAGS: 00050202 [ 126.494176] RAX: ffffed1015ef0af2 RBX: 0000000000000004 RCX: 0000000000000004 [ 126.501431] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff8880af785788 [ 126.508683] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed1015ef0af1 [ 126.515933] R10: ffff8880af78578b R11: ffff8880a3a242c0 R12: ffff8880af785788 [ 126.523194] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff8880b49ed698 [ 126.530473] copyin+0x99/0xc0 [ 126.533568] _copy_from_iter_full+0x19c/0x760 [ 126.538051] ? check_stack_object+0x86/0xa0 [ 126.542357] ? __phys_addr_symbol+0x1f/0x60 [ 126.546658] ? __check_object_size+0x179/0x230 [ 126.551224] vhci_write+0x143/0x420 [ 126.554836] __vfs_write+0x44c/0x630 [ 126.558531] ? kernel_read+0x110/0x110 [ 126.562407] ? rw_verify_area+0xe1/0x2a0 [ 126.566454] vfs_write+0x17f/0x4d0 [ 126.569976] SyS_write+0xf2/0x210 [ 126.573416] ? SyS_read+0x210/0x210 [ 126.577032] ? __do_page_fault+0x159/0xad0 [ 126.581248] ? do_syscall_64+0x4c/0x640 [ 126.585215] ? SyS_read+0x210/0x210 [ 126.588853] do_syscall_64+0x1d5/0x640 [ 126.592741] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 126.597919] RIP: 0033:0x7f6a58a18b5f [ 126.601611] RSP: 002b:00007f6a573db130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 126.609315] RAX: ffffffffffffffda RBX: 00007f6a58b78f60 RCX: 00007f6a58a18b5f [ 126.616564] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 126.623812] RBP: 00007f6a573db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 126.631061] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 126.638317] R13: 00007ffc2b42182f R14: 00007f6a573db300 R15: 0000000000022000 [ 126.645582] CPU: 1 PID: 25446 Comm: syz-executor.1 Not tainted 4.14.270-syzkaller #0 [ 126.653463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.662810] Call Trace: [ 126.665398] dump_stack+0x1b2/0x281 [ 126.669029] should_fail.cold+0x10a/0x149 [ 126.673173] should_failslab+0xd6/0x130 [ 126.677144] kmem_cache_alloc+0x28e/0x3c0 [ 126.681293] ptlock_alloc+0x1d/0x70 [ 126.684915] pte_alloc_one+0x57/0x100 [ 126.688737] do_huge_pmd_anonymous_page+0x500/0x1700 [ 126.693844] ? __lockdep_init_map+0x100/0x560 06:10:56 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 8) 06:10:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x200048d0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x129, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x2c}}, 0x40040a1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x4) 06:10:56 executing program 0: socket(0x8, 0x0, 0x3) [ 126.698343] ? prep_transhuge_page+0xa0/0xa0 [ 126.702748] ? _raw_spin_unlock+0x29/0x40 [ 126.706891] ? __pmd_alloc+0x27f/0x3f0 [ 126.710780] __handle_mm_fault+0x2ac4/0x4620 [ 126.715190] ? unwind_get_return_address+0x51/0x90 [ 126.720113] ? vm_insert_page+0x7c0/0x7c0 [ 126.724268] ? mark_held_locks+0xa6/0xf0 [ 126.728326] handle_mm_fault+0x455/0x9c0 [ 126.732391] __do_page_fault+0x549/0xad0 [ 126.736460] ? spurious_fault+0x640/0x640 [ 126.740608] ? do_page_fault+0x60/0x500 [ 126.744583] page_fault+0x25/0x50 06:10:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x200048d0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x129, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x2c}}, 0x40040a1) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x4) [ 126.748032] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 126.753653] RSP: 0018:ffff888091a6fc20 EFLAGS: 00050202 [ 126.759014] RAX: ffffed1015f61552 RBX: 0000000000000004 RCX: 0000000000000004 [ 126.766281] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff8880afb0aa88 [ 126.773548] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed1015f61551 [ 126.780827] R10: ffff8880afb0aa8b R11: ffff8880a053a5c0 R12: ffff8880afb0aa88 [ 126.787615] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 126.788095] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff8880a741ccd8 [ 126.802028] copyin+0x99/0xc0 [ 126.805173] _copy_from_iter_full+0x19c/0x760 [ 126.809677] ? check_stack_object+0x86/0xa0 [ 126.813998] ? __phys_addr_symbol+0x1f/0x60 [ 126.818322] ? __check_object_size+0x179/0x230 [ 126.822905] vhci_write+0x143/0x420 [ 126.826539] __vfs_write+0x44c/0x630 [ 126.830253] ? kernel_read+0x110/0x110 [ 126.831370] FAULT_INJECTION: forcing a failure. [ 126.831370] name failslab, interval 1, probability 0, space 0, times 0 [ 126.834148] ? rw_verify_area+0xe1/0x2a0 06:10:56 executing program 0: socket(0x8, 0x0, 0x0) [ 126.834161] vfs_write+0x17f/0x4d0 [ 126.834172] SyS_write+0xf2/0x210 [ 126.834180] ? SyS_read+0x210/0x210 [ 126.834189] ? __do_page_fault+0x159/0xad0 [ 126.834199] ? do_syscall_64+0x4c/0x640 [ 126.834206] ? SyS_read+0x210/0x210 [ 126.834215] do_syscall_64+0x1d5/0x640 [ 126.834229] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 126.834237] RIP: 0033:0x7fc89abe3b5f [ 126.834241] RSP: 002b:00007fc8995a6130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 126.892316] RAX: ffffffffffffffda RBX: 00007fc89ad43f60 RCX: 00007fc89abe3b5f [ 126.899583] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 126.906846] RBP: 00007fc8995a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 126.914109] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 126.921372] R13: 00007ffc7b4e347f R14: 00007fc8995a6300 R15: 0000000000022000 [ 126.929277] CPU: 0 PID: 25482 Comm: syz-executor.5 Not tainted 4.14.270-syzkaller #0 [ 126.937160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.946509] Call Trace: [ 126.949104] dump_stack+0x1b2/0x281 [ 126.952744] should_fail.cold+0x10a/0x149 [ 126.956897] should_failslab+0xd6/0x130 [ 126.960870] kmem_cache_alloc+0x28e/0x3c0 [ 126.965016] ptlock_alloc+0x1d/0x70 [ 126.968637] pte_alloc_one+0x57/0x100 [ 126.972440] do_huge_pmd_anonymous_page+0x500/0x1700 [ 126.977545] ? __lockdep_init_map+0x100/0x560 [ 126.982030] ? prep_transhuge_page+0xa0/0xa0 [ 126.986431] ? _raw_spin_unlock+0x29/0x40 [ 126.990574] ? __pmd_alloc+0x27f/0x3f0 [ 126.994458] __handle_mm_fault+0x2ac4/0x4620 [ 126.995018] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 126.998865] ? unwind_get_return_address+0x51/0x90 [ 126.998876] ? vm_insert_page+0x7c0/0x7c0 [ 127.014585] ? mark_held_locks+0xa6/0xf0 [ 127.018655] handle_mm_fault+0x455/0x9c0 [ 127.022718] __do_page_fault+0x549/0xad0 [ 127.026783] ? spurious_fault+0x640/0x640 [ 127.030933] ? do_page_fault+0x60/0x500 [ 127.034910] page_fault+0x25/0x50 [ 127.038367] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 127.043979] RSP: 0018:ffff888091a67c20 EFLAGS: 00050202 [ 127.049338] RAX: ffffed10133e24b2 RBX: 0000000000000004 RCX: 0000000000000004 [ 127.056603] RDX: 0000000000000004 RSI: 0000000020000040 RDI: ffff888099f12588 [ 127.063870] RBP: 0000000020000040 R08: 0000000000000001 R09: ffffed10133e24b1 [ 127.071150] R10: ffff888099f1258b R11: ffff88809b944240 R12: ffff888099f12588 [ 127.078417] R13: 00007ffffffff000 R14: 0000000020000044 R15: ffff88809af9bc98 [ 127.085791] copyin+0x99/0xc0 [ 127.088906] _copy_from_iter_full+0x19c/0x760 [ 127.093402] ? check_stack_object+0x86/0xa0 06:10:56 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 9) 06:10:56 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) (async) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1, 0x3, 0x6, 0x10, "6e43bb057264907f3e4ba4cc7ffb0d48b309a2b481bed9a6617d25889d20ee4886cd89c9a874d5ea26dcb90abe5910c2d2e925b07e7ed0aa46ac2261d8a86380", "cf8a21b78de9c5a1d444f9adaf38f93272a1305b3e403af209a8ec9c6b87de91", [0x0, 0x1]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x2e, 0x2, 0x0) 06:10:56 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xff, 0x80000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x30}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc8c1) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x0, 0x47, 0x1, '\x00', &(0x7f0000000180)=0x31}) 06:10:56 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) 06:10:56 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x157}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000240)=""/161, 0xa1, 0x56d5, &(0x7f0000000300)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20008000) 06:10:56 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) [ 127.097724] ? __phys_addr_symbol+0x1f/0x60 [ 127.102049] ? __check_object_size+0x179/0x230 [ 127.106631] vhci_write+0x143/0x420 [ 127.110261] __vfs_write+0x44c/0x630 [ 127.113976] ? kernel_read+0x110/0x110 [ 127.117878] ? rw_verify_area+0xe1/0x2a0 [ 127.121941] vfs_write+0x17f/0x4d0 [ 127.125478] SyS_write+0xf2/0x210 [ 127.128926] ? SyS_read+0x210/0x210 [ 127.132549] ? __do_page_fault+0x159/0xad0 [ 127.136782] ? do_syscall_64+0x4c/0x640 [ 127.140752] ? SyS_read+0x210/0x210 [ 127.144384] do_syscall_64+0x1d5/0x640 06:10:56 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x19, 0x0, @thr={&(0x7f0000000080)="f9d006aa55b67a920f68d249fb47847dd8f727144508e6c013251d947a81e52995d6d9662a3c21c5d7346780b9fe3ba759eb1d97c4c4a443a456e40c2870f0bc18622993c223770b3ce90d9ac6a7000da117ba2bb4d9216d609c82c0486c0a955a2a14cde23a75af98adb118f1b6fd1ff11bd0965e0d0cf16891c770afb57ef54e8d6d39474490bed40b3aba633046b85b2dde4a043140d74edfbd63124c2c0bcd35076ff34b611967eddfaafc94951903f9efc9473e9f19f248bb025e60a9ea90ff12baee44c81195e3", &(0x7f0000000180)="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"}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r0, 0x6}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001180), 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x19, 0x0, @thr={&(0x7f0000000080)="f9d006aa55b67a920f68d249fb47847dd8f727144508e6c013251d947a81e52995d6d9662a3c21c5d7346780b9fe3ba759eb1d97c4c4a443a456e40c2870f0bc18622993c223770b3ce90d9ac6a7000da117ba2bb4d9216d609c82c0486c0a955a2a14cde23a75af98adb118f1b6fd1ff11bd0965e0d0cf16891c770afb57ef54e8d6d39474490bed40b3aba633046b85b2dde4a043140d74edfbd63124c2c0bcd35076ff34b611967eddfaafc94951903f9efc9473e9f19f248bb025e60a9ea90ff12baee44c81195e3", &(0x7f0000000180)="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"}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r0, 0x6}) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001180), 0x2, 0x0) (async) [ 127.148280] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 127.153462] RIP: 0033:0x7f6a58a18b5f [ 127.157169] RSP: 002b:00007f6a573db130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 127.164875] RAX: ffffffffffffffda RBX: 00007f6a58b78f60 RCX: 00007f6a58a18b5f [ 127.172143] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000000ca [ 127.179411] RBP: 00007f6a573db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 127.186680] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 127.193951] R13: 00007ffc2b42182f R14: 00007f6a573db300 R15: 0000000000022000 06:10:56 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (fail_nth: 9) 06:10:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x200048d0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x129, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x2c}}, 0x40040a1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x4) 06:10:56 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x157}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000240)=""/161, 0xa1, 0x56d5, &(0x7f0000000300)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20008000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x157}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000240)=""/161, 0xa1, 0x56d5, &(0x7f0000000300)) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20008000) (async) 06:10:56 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) (async) 06:10:56 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xff, 0x80000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x30}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc8c1) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x0, 0x47, 0x1, '\x00', &(0x7f0000000180)=0x31}) 06:10:56 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x19, 0x0, @thr={&(0x7f0000000080)="f9d006aa55b67a920f68d249fb47847dd8f727144508e6c013251d947a81e52995d6d9662a3c21c5d7346780b9fe3ba759eb1d97c4c4a443a456e40c2870f0bc18622993c223770b3ce90d9ac6a7000da117ba2bb4d9216d609c82c0486c0a955a2a14cde23a75af98adb118f1b6fd1ff11bd0965e0d0cf16891c770afb57ef54e8d6d39474490bed40b3aba633046b85b2dde4a043140d74edfbd63124c2c0bcd35076ff34b611967eddfaafc94951903f9efc9473e9f19f248bb025e60a9ea90ff12baee44c81195e3", &(0x7f0000000180)="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"}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r0, 0x6}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001180), 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x19, 0x0, @thr={&(0x7f0000000080)="f9d006aa55b67a920f68d249fb47847dd8f727144508e6c013251d947a81e52995d6d9662a3c21c5d7346780b9fe3ba759eb1d97c4c4a443a456e40c2870f0bc18622993c223770b3ce90d9ac6a7000da117ba2bb4d9216d609c82c0486c0a955a2a14cde23a75af98adb118f1b6fd1ff11bd0965e0d0cf16891c770afb57ef54e8d6d39474490bed40b3aba633046b85b2dde4a043140d74edfbd63124c2c0bcd35076ff34b611967eddfaafc94951903f9efc9473e9f19f248bb025e60a9ea90ff12baee44c81195e3", &(0x7f0000000180)="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"}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r0, 0x6}) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001180), 0x2, 0x0) (async) 06:10:56 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xff, 0x80000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x30}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc8c1) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x0, 0x47, 0x1, '\x00', &(0x7f0000000180)=0x31}) 06:10:56 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:56 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) 06:10:56 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32], 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000040), 0x80000000, 0x484c01) 06:10:56 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x157}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000240)=""/161, 0xa1, 0x56d5, &(0x7f0000000300)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20008000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x157}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000240)=""/161, 0xa1, 0x56d5, &(0x7f0000000300)) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20008000) (async) [ 127.318179] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:56 executing program 3: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) 06:10:56 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32], 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) syz_open_dev$loop(&(0x7f0000000040), 0x80000000, 0x484c01) 06:10:56 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xff, 0x80000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x30}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc8c1) 06:10:56 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) (async) 06:10:56 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:10:56 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32], 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000040), 0x80000000, 0x484c01) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32], 0x4) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) syz_open_dev$loop(&(0x7f0000000040), 0x80000000, 0x484c01) (async) 06:10:56 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xc5, 0xa0, &(0x7f0000000000)="555228ccef6e89466245f3f8585e4a5f52f5cfbfd9eb59fe60ba3cbf40ea80008be4d71c3837665fed30679176aa5640f4f81d3f6d93a1f052dad1cbe458287a57ed95080071779e74c1fe8d04c0cf8abe573842c1ff751b14b345fda6cc0672629cec5829d4775ce7f9cc800ec792aef5ec81a0d840f1f94fbfc61a1edd9f3e9afdbe6ea824328dfc407efefea53312f7dbb4fcb60a32bb2682f6b34b14ff2678eb60ddb26e17125ae296d1dd2a7b387e3b4c34cb81146c0256bffb965bcaf02e0a5183a5", &(0x7f0000000100)=""/160, 0x1, 0x0, 0xa1, 0x60, &(0x7f00000001c0)="2e966c496807123bdbd06c3f43f1b2e4322edb75ab06f4e2cee916f06b55550a9e24caba7b12b37f72c239025da020a8744a1fd166aad15bb61854829b9bb75a3a2277dae7a8c9db4c9b5da4c904df2bef4914f0149486c397ba9149a7c8bd6be06d0d8fc929af77014d0376b4dd86e27ab8cf26a81be8e19ac8d21c7ec8987cf112b046bf8890cfb1c69efb053652f18eab414b7a07a8ad09d2acf5d0d84f79dd", &(0x7f0000000400)="b0749ab2699a2869121a28819990380be5be0855ddb6c222e1539fea27fe95c1c30baaafda1b7a68fe03d0118f5f51026372544d7d349623ba0bd671a0f2721a4562a93cbf7f520aeca4b044b799bde8eb9f98ddae6387c00d0f2244b7b355a8", 0x1}, 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r0, 0x1}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000480)="9c95ee92aa6cf3bf3b24a316e4abddd3ddcde78fda2e9c776c4199801e24b6ec1aa6ff9dd7c781d89a8f6d760046f61e2cd325b2e9b9977e57543d987681a988e85472de5ed1433a7c352e12d631f7b996546480b244837a01246560a60dc40f6c35ba594f04c2014997e7dbf99f9901b9dfbd71687692ae7879795ff9a7b7878e07397c1942", &(0x7f0000000280)=@udp6=r0, 0x1}, 0x20) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x7, 0x402) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@getneigh={0x14, 0x1e, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000580)=r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r0, r0}) 06:10:56 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xff, 0x80000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x30}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc8c1) 06:10:56 executing program 3: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) socket$pppoe(0x18, 0x1, 0x0) (async) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) 06:10:56 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xc5, 0xa0, &(0x7f0000000000)="555228ccef6e89466245f3f8585e4a5f52f5cfbfd9eb59fe60ba3cbf40ea80008be4d71c3837665fed30679176aa5640f4f81d3f6d93a1f052dad1cbe458287a57ed95080071779e74c1fe8d04c0cf8abe573842c1ff751b14b345fda6cc0672629cec5829d4775ce7f9cc800ec792aef5ec81a0d840f1f94fbfc61a1edd9f3e9afdbe6ea824328dfc407efefea53312f7dbb4fcb60a32bb2682f6b34b14ff2678eb60ddb26e17125ae296d1dd2a7b387e3b4c34cb81146c0256bffb965bcaf02e0a5183a5", &(0x7f0000000100)=""/160, 0x1, 0x0, 0xa1, 0x60, &(0x7f00000001c0)="2e966c496807123bdbd06c3f43f1b2e4322edb75ab06f4e2cee916f06b55550a9e24caba7b12b37f72c239025da020a8744a1fd166aad15bb61854829b9bb75a3a2277dae7a8c9db4c9b5da4c904df2bef4914f0149486c397ba9149a7c8bd6be06d0d8fc929af77014d0376b4dd86e27ab8cf26a81be8e19ac8d21c7ec8987cf112b046bf8890cfb1c69efb053652f18eab414b7a07a8ad09d2acf5d0d84f79dd", &(0x7f0000000400)="b0749ab2699a2869121a28819990380be5be0855ddb6c222e1539fea27fe95c1c30baaafda1b7a68fe03d0118f5f51026372544d7d349623ba0bd671a0f2721a4562a93cbf7f520aeca4b044b799bde8eb9f98ddae6387c00d0f2244b7b355a8", 0x1}, 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r0, 0x1}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000480)="9c95ee92aa6cf3bf3b24a316e4abddd3ddcde78fda2e9c776c4199801e24b6ec1aa6ff9dd7c781d89a8f6d760046f61e2cd325b2e9b9977e57543d987681a988e85472de5ed1433a7c352e12d631f7b996546480b244837a01246560a60dc40f6c35ba594f04c2014997e7dbf99f9901b9dfbd71687692ae7879795ff9a7b7878e07397c1942", &(0x7f0000000280)=@udp6=r0, 0x1}, 0x20) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x7, 0x402) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@getneigh={0x14, 0x1e, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000580)=r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r0, r0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xc5, 0xa0, &(0x7f0000000000)="555228ccef6e89466245f3f8585e4a5f52f5cfbfd9eb59fe60ba3cbf40ea80008be4d71c3837665fed30679176aa5640f4f81d3f6d93a1f052dad1cbe458287a57ed95080071779e74c1fe8d04c0cf8abe573842c1ff751b14b345fda6cc0672629cec5829d4775ce7f9cc800ec792aef5ec81a0d840f1f94fbfc61a1edd9f3e9afdbe6ea824328dfc407efefea53312f7dbb4fcb60a32bb2682f6b34b14ff2678eb60ddb26e17125ae296d1dd2a7b387e3b4c34cb81146c0256bffb965bcaf02e0a5183a5", &(0x7f0000000100)=""/160, 0x1, 0x0, 0xa1, 0x60, &(0x7f00000001c0)="2e966c496807123bdbd06c3f43f1b2e4322edb75ab06f4e2cee916f06b55550a9e24caba7b12b37f72c239025da020a8744a1fd166aad15bb61854829b9bb75a3a2277dae7a8c9db4c9b5da4c904df2bef4914f0149486c397ba9149a7c8bd6be06d0d8fc929af77014d0376b4dd86e27ab8cf26a81be8e19ac8d21c7ec8987cf112b046bf8890cfb1c69efb053652f18eab414b7a07a8ad09d2acf5d0d84f79dd", &(0x7f0000000400)="b0749ab2699a2869121a28819990380be5be0855ddb6c222e1539fea27fe95c1c30baaafda1b7a68fe03d0118f5f51026372544d7d349623ba0bd671a0f2721a4562a93cbf7f520aeca4b044b799bde8eb9f98ddae6387c00d0f2244b7b355a8", 0x1}, 0x48) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r0, 0x1}, 0xc) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000480)="9c95ee92aa6cf3bf3b24a316e4abddd3ddcde78fda2e9c776c4199801e24b6ec1aa6ff9dd7c781d89a8f6d760046f61e2cd325b2e9b9977e57543d987681a988e85472de5ed1433a7c352e12d631f7b996546480b244837a01246560a60dc40f6c35ba594f04c2014997e7dbf99f9901b9dfbd71687692ae7879795ff9a7b7878e07397c1942", &(0x7f0000000280)=@udp6=r0, 0x1}, 0x20) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000005c0), 0x7, 0x402) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@getneigh={0x14, 0x1e, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x1) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000580)=r0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r0, r0}) (async) 06:10:56 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:10:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x20000001}) ioperm(0xfff0000000000000, 0x4, 0x8000000000000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) 06:10:56 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) (async) 06:10:57 executing program 3: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) getpgrp(0xffffffffffffffff) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) socket$pppoe(0x18, 0x1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) 06:10:57 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0xff, 0x80000}) 06:10:57 executing program 5: syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x10, 0x20, 0x8, 0x2, {{0x12, 0x4, 0x3, 0x24, 0x48, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @empty, {[@generic={0x7, 0xf, "11fde60ef00941533ec7e808ff"}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x30}]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0x12, "158595f1910576ba70fe6dd1e1a4199c"}]}]}}}}}) clock_getres(0x1, &(0x7f00000000c0)) 06:10:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x20000001}) ioperm(0xfff0000000000000, 0x4, 0x8000000000000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x20000001}) (async) ioperm(0xfff0000000000000, 0x4, 0x8000000000000000) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) 06:10:57 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xc5, 0xa0, &(0x7f0000000000)="555228ccef6e89466245f3f8585e4a5f52f5cfbfd9eb59fe60ba3cbf40ea80008be4d71c3837665fed30679176aa5640f4f81d3f6d93a1f052dad1cbe458287a57ed95080071779e74c1fe8d04c0cf8abe573842c1ff751b14b345fda6cc0672629cec5829d4775ce7f9cc800ec792aef5ec81a0d840f1f94fbfc61a1edd9f3e9afdbe6ea824328dfc407efefea53312f7dbb4fcb60a32bb2682f6b34b14ff2678eb60ddb26e17125ae296d1dd2a7b387e3b4c34cb81146c0256bffb965bcaf02e0a5183a5", &(0x7f0000000100)=""/160, 0x1, 0x0, 0xa1, 0x60, &(0x7f00000001c0)="2e966c496807123bdbd06c3f43f1b2e4322edb75ab06f4e2cee916f06b55550a9e24caba7b12b37f72c239025da020a8744a1fd166aad15bb61854829b9bb75a3a2277dae7a8c9db4c9b5da4c904df2bef4914f0149486c397ba9149a7c8bd6be06d0d8fc929af77014d0376b4dd86e27ab8cf26a81be8e19ac8d21c7ec8987cf112b046bf8890cfb1c69efb053652f18eab414b7a07a8ad09d2acf5d0d84f79dd", &(0x7f0000000400)="b0749ab2699a2869121a28819990380be5be0855ddb6c222e1539fea27fe95c1c30baaafda1b7a68fe03d0118f5f51026372544d7d349623ba0bd671a0f2721a4562a93cbf7f520aeca4b044b799bde8eb9f98ddae6387c00d0f2244b7b355a8", 0x1}, 0x48) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r0, 0x1}, 0xc) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000480)="9c95ee92aa6cf3bf3b24a316e4abddd3ddcde78fda2e9c776c4199801e24b6ec1aa6ff9dd7c781d89a8f6d760046f61e2cd325b2e9b9977e57543d987681a988e85472de5ed1433a7c352e12d631f7b996546480b244837a01246560a60dc40f6c35ba594f04c2014997e7dbf99f9901b9dfbd71687692ae7879795ff9a7b7878e07397c1942", &(0x7f0000000280)=@udp6=r0, 0x1}, 0x20) (async, rerun: 64) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x7, 0x402) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@getneigh={0x14, 0x1e, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000580)=r0) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r0, r0}) 06:10:57 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) [ 127.567726] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 1: accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:57 executing program 5: syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x10, 0x20, 0x8, 0x2, {{0x12, 0x4, 0x3, 0x24, 0x48, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @empty, {[@generic={0x7, 0xf, "11fde60ef00941533ec7e808ff"}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x30}]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0x12, "158595f1910576ba70fe6dd1e1a4199c"}]}]}}}}}) clock_getres(0x1, &(0x7f00000000c0)) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x10, 0x20, 0x8, 0x2, {{0x12, 0x4, 0x3, 0x24, 0x48, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @empty, {[@generic={0x7, 0xf, "11fde60ef00941533ec7e808ff"}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x30}]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0x12, "158595f1910576ba70fe6dd1e1a4199c"}]}]}}}}}) (async) clock_getres(0x1, &(0x7f00000000c0)) (async) 06:10:57 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:10:57 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbf, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x5, 0x8e, 0xfff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffff, 0x8001}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=0x94) 06:10:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x20000001}) ioperm(0xfff0000000000000, 0x4, 0x8000000000000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x20000001}) (async) ioperm(0xfff0000000000000, 0x4, 0x8000000000000000) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) 06:10:57 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) [ 127.632172] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 127.646941] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 5: syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x10, 0x20, 0x8, 0x2, {{0x12, 0x4, 0x3, 0x24, 0x48, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @empty, {[@generic={0x7, 0xf, "11fde60ef00941533ec7e808ff"}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x30}]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0x12, "158595f1910576ba70fe6dd1e1a4199c"}]}]}}}}}) (rerun: 32) clock_getres(0x1, &(0x7f00000000c0)) 06:10:57 executing program 1: accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:10:57 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x53}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6dd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 06:10:57 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbf, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x5, 0x8e, 0xfff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffff, 0x8001}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbf, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x5, 0x8e, 0xfff}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r2) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffff, 0x8001}) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=0x94) (async) 06:10:57 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) (async) [ 127.703894] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 127.718185] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000001c0)={0x2, {0x2, 0x4, 0x1f, 0x3c4}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x3, 0x101, 0x8, 0xf2da, 0x20, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x0, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1c, 0x60, 0xa99, 0x90, 0x43, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) 06:10:57 executing program 0: socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r1, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) 06:10:57 executing program 1: accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:10:57 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 06:10:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:10:57 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbf, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x5, 0x8e, 0xfff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffff, 0x8001}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbf, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x5, 0x8e, 0xfff}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r2) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffff, 0x8001}) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=0x94) (async) 06:10:57 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000001c0)={0x2, {0x2, 0x4, 0x1f, 0x3c4}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x3, 0x101, 0x8, 0xf2da, 0x20, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x0, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1c, 0x60, 0xa99, 0x90, 0x43, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000180), 0x2, 0x2) (async) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000001c0)={0x2, {0x2, 0x4, 0x1f, 0x3c4}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x3, 0x101, 0x8, 0xf2da, 0x20, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x0, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1c, 0x60, 0xa99, 0x90, 0x43, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) (async) 06:10:57 executing program 0: socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r1, 0xffffffffffffffff, 0x11}, 0x10) [ 127.845017] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 06:10:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:10:57 executing program 2: r0 = mq_open(&(0x7f0000000000)='\x00', 0x2, 0xb2, &(0x7f0000000040)={0x6, 0x3885, 0xfffffffffffffff8, 0x6}) mq_timedsend(r0, 0x0, 0x0, 0x8000, 0x0) 06:10:57 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setgid(r0) 06:10:57 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000001c0)={0x2, {0x2, 0x4, 0x1f, 0x3c4}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x3, 0x101, 0x8, 0xf2da, 0x20, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x0, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1c, 0x60, 0xa99, 0x90, 0x43, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000180), 0x2, 0x2) (async) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000001c0)={0x2, {0x2, 0x4, 0x1f, 0x3c4}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x3, 0x101, 0x8, 0xf2da, 0x20, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x0, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1c, 0x60, 0xa99, 0x90, 0x43, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) (async) 06:10:57 executing program 0: socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 127.925317] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 127.932307] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 0: socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) 06:10:57 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 06:10:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) 06:10:57 executing program 2: r0 = mq_open(&(0x7f0000000000)='\x00', 0x2, 0xb2, &(0x7f0000000040)={0x6, 0x3885, 0xfffffffffffffff8, 0x6}) mq_timedsend(r0, 0x0, 0x0, 0x8000, 0x0) 06:10:57 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setgid(r0) 06:10:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) [ 128.013042] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.021423] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map, 0xffffffffffffffff, 0x11}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="322447158c5cb31454687c9a4a6af6f66bf039d099fea9987354f05aec4552a960f7ac9a191d85b0ffbeb09889a2443d7b967f0e9cf4e1cd3776f8739094306071c70945d067774caf77da5dbe6d1fd07a85bc28120efb16f0369a89f4a8a7b856b3409a2d488ed0ff30130a42326ad4faa484ed0642fa7ab107918b24f85bbd", 0x80, 0x1, &(0x7f0000000080)={0x77359400}) 06:10:57 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1, &(0x7f0000000080)=@raw=[@generic={0x8, 0x4, 0x6, 0xf93, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x7fff, 0x75, &(0x7f0000000100)=""/117, 0x41000, 0x1, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xb, 0x8, 0x460f0cdb}, 0x10}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) 06:10:57 executing program 0: socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) 06:10:57 executing program 2: r0 = mq_open(&(0x7f0000000000)='\x00', 0x2, 0xb2, &(0x7f0000000040)={0x6, 0x3885, 0xfffffffffffffff8, 0x6}) mq_timedsend(r0, 0x0, 0x0, 0x8000, 0x0) 06:10:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) 06:10:57 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setgid(r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async) setgid(r0) (async) [ 128.092709] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 0: socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) 06:10:57 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) prctl$PR_SET_TIMERSLACK(0x1d, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1, &(0x7f0000000080)=@raw=[@generic={0x8, 0x4, 0x6, 0xf93, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x7fff, 0x75, &(0x7f0000000100)=""/117, 0x41000, 0x1, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xb, 0x8, 0x460f0cdb}, 0x10}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) 06:10:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) 06:10:57 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map, 0xffffffffffffffff, 0x11}, 0x10) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="322447158c5cb31454687c9a4a6af6f66bf039d099fea9987354f05aec4552a960f7ac9a191d85b0ffbeb09889a2443d7b967f0e9cf4e1cd3776f8739094306071c70945d067774caf77da5dbe6d1fd07a85bc28120efb16f0369a89f4a8a7b856b3409a2d488ed0ff30130a42326ad4faa484ed0642fa7ab107918b24f85bbd", 0x80, 0x1, &(0x7f0000000080)={0x77359400}) 06:10:57 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x6) r0 = getpgrp(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x2}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:10:57 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) [ 128.147713] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 0: syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200) 06:10:57 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 06:10:57 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x6) (async) r0 = getpgrp(0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x2}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:10:57 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map, 0xffffffffffffffff, 0x11}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="322447158c5cb31454687c9a4a6af6f66bf039d099fea9987354f05aec4552a960f7ac9a191d85b0ffbeb09889a2443d7b967f0e9cf4e1cd3776f8739094306071c70945d067774caf77da5dbe6d1fd07a85bc28120efb16f0369a89f4a8a7b856b3409a2d488ed0ff30130a42326ad4faa484ed0642fa7ab107918b24f85bbd", 0x80, 0x1, &(0x7f0000000080)={0x77359400}) 06:10:57 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1, &(0x7f0000000080)=@raw=[@generic={0x8, 0x4, 0x6, 0xf93, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x7fff, 0x75, &(0x7f0000000100)=""/117, 0x41000, 0x1, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xb, 0x8, 0x460f0cdb}, 0x10}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) prctl$PR_SET_TIMERSLACK(0x1d, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1, &(0x7f0000000080)=@raw=[@generic={0x8, 0x4, 0x6, 0xf93, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x7fff, 0x75, &(0x7f0000000100)=""/117, 0x41000, 0x1, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xb, 0x8, 0x460f0cdb}, 0x10}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) (async) 06:10:57 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) 06:10:57 executing program 0: syz_open_dev$vcsn(0x0, 0x9, 0x200) [ 128.216103] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 0: syz_open_dev$vcsn(0x0, 0x9, 0x200) 06:10:57 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x6) (async) r0 = getpgrp(0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x2}) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:10:57 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000940)={0x0, 0x1, 0x2, 0x6, 0x1, 0x81, 0x6, 0x40, 0x2, 0x1, 0xaa, "f560ee11c9eecd5a6bee173651f1a7c4890a5d976e6246b80dfe692137ad33df"}) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x1, 0x3, 0x1, 0x80, 0x0, 0x4, 0x1002, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x7}, 0x2303, 0x5, 0x9, 0x0, 0x0, 0x5, 0x330f, 0x0, 0x3ff, 0x0, 0x8000000000000000}, r0, 0x8, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x11}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) r3 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, 0xffffffffffffffff, 0x0) mq_notify(r2, &(0x7f0000000900)={0x0, 0x4, 0x2, @tid=r3}) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000000)) 06:10:57 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 06:10:57 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_notify(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="4fd6151fc7167c974d", &(0x7f0000001600)="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"}}) 06:10:57 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) [ 128.293212] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 0: syz_open_dev$vcsn(0x0, 0x9, 0x200) 06:10:57 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x40001, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x4c400, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x11) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r3, 0x2, r5, 0x80000000}) 06:10:57 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000940)={0x0, 0x1, 0x2, 0x6, 0x1, 0x81, 0x6, 0x40, 0x2, 0x1, 0xaa, "f560ee11c9eecd5a6bee173651f1a7c4890a5d976e6246b80dfe692137ad33df"}) (async) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x1, 0x3, 0x1, 0x80, 0x0, 0x4, 0x1002, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x7}, 0x2303, 0x5, 0x9, 0x0, 0x0, 0x5, 0x330f, 0x0, 0x3ff, 0x0, 0x8000000000000000}, r0, 0x8, 0xffffffffffffffff, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x11}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) r3 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, 0xffffffffffffffff, 0x0) (async) mq_notify(r2, &(0x7f0000000900)={0x0, 0x4, 0x2, @tid=r3}) (async) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000000)) 06:10:57 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (rerun: 32) 06:10:57 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x1, 0x3, 0x4, 0xb, 0x4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xc8, &(0x7f0000000080)=""/200, 0x41100, 0x4, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x7, 0x7, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x12019c8e90d9ae64}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000) 06:10:57 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_notify(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="4fd6151fc7167c974d", &(0x7f0000001600)="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"}}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mq_notify(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="4fd6151fc7167c974d", &(0x7f0000001600)="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"}}) (async) 06:10:57 executing program 0: syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x200) [ 128.376751] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x1, 0x3, 0x4, 0xb, 0x4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xc8, &(0x7f0000000080)=""/200, 0x41100, 0x4, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x7, 0x7, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x12019c8e90d9ae64}, 0x10) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000) 06:10:57 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x1, 0x3, 0x4, 0xb, 0x4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xc8, &(0x7f0000000080)=""/200, 0x41100, 0x4, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x7, 0x7, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x12019c8e90d9ae64}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x1, 0x3, 0x4, 0xb, 0x4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0xc8, &(0x7f0000000080)=""/200, 0x41100, 0x4, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x7, 0x7, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0x1]}, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x12019c8e90d9ae64}, 0x10) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000) (async) [ 128.441632] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.448619] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.455422] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.462117] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.470651] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.477645] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.484382] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:57 executing program 0: syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x0) 06:10:57 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x40001, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x4c400, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x11) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r3, 0x2, r5, 0x80000000}) [ 128.491067] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.497940] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.504746] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.511422] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.518877] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.525709] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.532384] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:58 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="ae4d2a2a4517a9537b8e9a634bd81c25c1d205d26e70dc73c39a88b624a8b4e645dbcfb55500e3c8e84c9d8833346b35e20470071f09c86a1b7a7b23a3fc51b4c04dfba9721f"], 0x4) 06:10:58 executing program 4: connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'wg2\x00'}}, 0x1e) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x18007, 0x10, 0x5, 0xb, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x0, 0x81, 0x2f, 0x0, @empty, @multicast1}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESOCT=r0], 0x4) 06:10:58 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000940)={0x0, 0x1, 0x2, 0x6, 0x1, 0x81, 0x6, 0x40, 0x2, 0x1, 0xaa, "f560ee11c9eecd5a6bee173651f1a7c4890a5d976e6246b80dfe692137ad33df"}) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x1, 0x3, 0x1, 0x80, 0x0, 0x4, 0x1002, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x7}, 0x2303, 0x5, 0x9, 0x0, 0x0, 0x5, 0x330f, 0x0, 0x3ff, 0x0, 0x8000000000000000}, r0, 0x8, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x11}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) r3 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, 0xffffffffffffffff, 0x0) mq_notify(r2, &(0x7f0000000900)={0x0, 0x4, 0x2, @tid=r3}) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) getpgrp(0xffffffffffffffff) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000940)={0x0, 0x1, 0x2, 0x6, 0x1, 0x81, 0x6, 0x40, 0x2, 0x1, 0xaa, "f560ee11c9eecd5a6bee173651f1a7c4890a5d976e6246b80dfe692137ad33df"}) (async) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x1, 0x3, 0x1, 0x80, 0x0, 0x4, 0x1002, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x7}, 0x2303, 0x5, 0x9, 0x0, 0x0, 0x5, 0x330f, 0x0, 0x3ff, 0x0, 0x8000000000000000}, r0, 0x8, 0xffffffffffffffff, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x11}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) (async) getpgrp(0xffffffffffffffff) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, 0xffffffffffffffff, 0x0) (async) mq_notify(r2, &(0x7f0000000900)={0x0, 0x4, 0x2, @tid=r3}) (async) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000000)) (async) [ 128.539305] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.546057] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.552732] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.559642] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.566388] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.573071] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.579855] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:58 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mq_notify(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="4fd6151fc7167c974d", &(0x7f0000001600)="a24c25307625549f06f611f6e88ccfc982c8c76e5373a290e289d63c576406442cd9f695250b2c6da79d2c47122fdf1c5a5323c2a5ad4e91c21d8b944d4ae98ae632599191119e65a7e24718ad1bcacf1da9986c8d1758c934649a6fc745eff356ce7337c607edd54c807e4c18704af0f36c33a5c09a57a00bd66aefc16e1aff5526705613cf6ecb97d520c64aa196778f97723c279df0e0945bc95cac026442a8d3f6e3c09de55e126eef7bc14d3f6e3d04ef1c441032bdb611191aefce1fc75f29093c390648271ffaf20e43a6979ecd24abfa4e2241cec694ec79f93e79742190657842cc4a4e57f95f74849788dbafd566e3d1598075b51d044d056fc954673ec7cbd1591be5863e622c0e28a8f1cbc21ca0b5334e67ae020d012c8215c4712a801d22930ecfd8705ad66c6a6f487696aef03aaaf932afa118de4fa4bb0315b6118fdaa742f41fc85669b8631f071862c01871aa8947e4a5022776d96115aa7f0e89d0bb28a0fc9036fc7edc773eaa515863da3d499e2b15d5558b068267c4c877e56fc7f3e4a762b936214929d4793b8ac1f1e9a3c8200ed8d7173449535d19d18143f4ca3d6d1ea0686012429b8319f150710f64daeb78e235798ca77de29a83b5e8a54e5916abb025f70f170aa870bb66292137640c0923859e647ab7474911ac7002269c9ce0c2e15d107af81d611010ced9b3273cc1ee388205ddc91fa99a9547407607a7e01537fa16fa11dc715486fe6c1b62c341198c29628bd6a65a200511eafb39bbb3a75a20b55e53808976a0cd57cd827e4d3641c6bf770071ded18862126c346ac5308f341377ca6970bf6165efc60a0b9c60a3b4ebc1c2543e92363dc64a8f3ef59ceab346a2e3dd71ee61fd734b0a2ad3cc8d618420a318a1e77d6f07aaf13b585ce8856b23ddbbe88b1d92be59b60133f707810bd41007d3cd1bd2904e4aab682785f3e20367fdf6855e999cbdfea1088d68ae50059969f651b8585fe4b15a69c5faa5c47d9aea1640445040465a30819b7193110f6d3018c6cf3597edcf3a2dcf6e2735dc094eb986394a60e2baf8653c6fe3c15322cc1445d1aeb437c5962b3daf86c1731ace0fc5dea679fd2d18c1fa050519dd593ae6ae8d8c47943b5db54f5d33c10159fa51556e2852b8c1cda72da1989a2a7fe4e501b96c17a5247bdec1bbd84f9b26d5d8c2a2e2e38721516e1335fefd67de09313b91ba81d44d486dc96ecc5ddc8d8470de486a8c2ef8914bf6c96dc90a140e5e8f10f40b42247b84aa39f8d0cd9739c7912128683a59935336ac8c416e3893cc7765c5d5b3797f579daf6aa013ec72c7eb3fc55bd832f0ad8f9e5e54f8aee60b7f5619c23cba8ed7050b44258fb0ebc25a2bf5a2fd10c630bf5100282c426361fbaf0b4425edbde9b7bcbbbde688a9badab7b8d8600dde1204e7a271893a23203bca2d149e4fd898ce9d81265cd63bbe65b7e0128e233e7861b63c2d3f56b452c4ae83f5d314d9c9e6f1151d2385c9f64cd7afc4aba144803beec1ad7848a30cfec5704eef54a290888ab2139248e1f4f6d0921f3fe1e6691644c0b619bacf706d09e358eb2f0166a50d4bf80e44505db73afdd6e4978e62faf2d0573383e7a476f03265c5e9ac39a5167ecc1c8b9e84fe5c67c18dc171b2c571f86fd03f750b4ff434949ca41fc3e26abf030bd8a9532ddd548cdfbe15dffb519a2c63672b04fe29060feb16278d9842e40138d620d46d7dc965cc668d5a65669064c8a851d340c9339f933868221844bc2305e72aee7f8e6e64fa2620b4f138c890cded5b77d6ac4806230b750597f8c9a5d88630a87ed567ea123f5865007cee87c0c6cd8d76bd16c5c3e98d0373067bb9c7296cf59615eeca4f0395743b7a03248a549d90c5816f9c93e5ce14ee63239db7c702294548265308e7badfff6c4b05355f5c27c6a484cae5d50d23199c0633d1e7ca954e1483e18503f1fc6caa272851492afeeb44819111414ddec02db4d2b02ed43d139e43ea279391d9da3eb1a94b01709f3e6b730de608a0336d9ec09496a61737ad32d8bcb6ed1232f9e06827e21409e4e4e85f29d9282cdf4dc7af77b9e8d80a4c68b534087d611d56050bef164734afe561880c8948eb37935d375dfb016fe3f468316df8268c9fcea4852a5c98b3a254446421dd7a7ebd635cd9db7d40b547b69b08203914b904a4f64dc254be92b0ff9897a4a4a1175d7144a17d37ac8827b86b5f14d589194c54732ea8fb2b8b67a4a15913b70ced4d30f738e9ad340f78487d5acfa971f7d3fb90d4acd8dae73df4725dc4a3e080887c8093a8db711dc1dea6b713ed234e6eda55ca458986398f43d20956f55ecdd7ee81c74bae1b3f76d69a082d3356c189cc81da2d1a533ad30384ed323ec9231a648c5144f12df6676fd18ab3eecc72b7772d54d94e66168541908ac3ebb854b83f44d9766c3271c11fe2be43c0688b26d21e1fe3faa18c4ffa7ece7a1eb5b60734d5d1287ab4cc330b4d2316cefbfab1a98ccd079c710cbfd828fcce1118ea6f0a8ea8910205ece180a8d043e0f3597a0ffe883d42a844b370bdabf43660a1514688f886987493ff2dc8fe640b32fb7dc301a96925897fc8f1ec0af24d3eac32911097348f261a0bf61206543ad8c1df85f98706d708abe52590847ddb1f778fcbc536ac33088266125b5d6f04fb4680046b07546fa8fe937ff56b7afc7a27c175560f926ff57bcfa4319c595a8bd20952f2a6529f4cab05f845379b12016ab0ecf01f91f51d7d7f1b29d7f51af9a82287b09287a34d55bc0bf49b7088fcf08c547e6126c018fb6599c47210c7dcb5c163676d2bc097305c05a073d0840e474b5486f0d011cfdea0ee3d69f50db08e9046e67e1d2aeb540a9e7f5a091f6e2f674f692063aeb4a9baf1b1e4b2bb244ae35072b58aa50cead1c9dfd1aa6c0cd2a742bf7542251bb2911c25f1b471987ef85752770ecdcc247961b6d488acf66a8fdafa5fa56b956d733122590319d9dd7bd7173bf3cd43c86e4f5a34e4ceb996253b5fd404468c4f62812eb0bd9194231b8519878a6bc6b881ffaaff02101c58b8c5a5e83f00f8d0b7ffde09410416c77c34a4fe0bbdfb5d1f71fe45546548d803008adc5387aec4f4835215e10d0ad46540c19df76cdc5a71f278ee7bd69b8125a31a586df8c10f3363c2078994d66acae21ec3ebacfaa73e37a31b676f94b4a3422bb21c47000d07f70dcda726459814cd2fb30b244ca2e224db70a8bf30caf31d972a704b2052c4dc293249d69225a795a4436fc9c539ea4b7c74d06a10dd8a2829e922bc17cd09b388229212f733a4c561a270e4b26aac10eaa0106928a0b3cd287af2c39a002fc785cca284a6a7131ca702fc177854459c2df06b1b0449e8097fa83ef8b9244816209e14d82834a623c39d17ad8a3fc01f2c22e71e33e56aa47d9f1fffffc6e64afd0e0a340c991cba6e0f0ec87fc1c1a309d1577fb148588dcbd88e31d806543278537f2c27275efd8791b35c3294e98407d0f10085999f2b776ed100ee436dcd4fe8f3761d1b8590aa6fc816f7558e29cf3d0404bb97e020f1b033e127ca4c70d4fc76f2429e0796e97e5168f305064d2ea9e0a891f68404ecc1a828a1ccbd0cfcd18ba1675352a3af1ecebea0dd5eb87799bb45c61e7a25f6ca0488c42ad3afbd8c3bad1fd140f19654a9b9ed73d2aa2758a6a15a43872bb632b33fc25258ea79e0adc0f8b9e69a4c46a4dd17a59faf218eeb11b30df67c3c0bb0b0c03345f680e0ac9066e8995bbf0a4d4be38aee27e8ca0a21aacf76659906c2325f1c5ce511e0947f9d2b3dbc1c8c6dec2379289c1e85ba009e9c741619137aa336f2f2e3fd0deb305d2d206fc9bfa5d1f94656ae675c2139c34c63bdd18cd740ab95151735c5618524a01fb9b202da97b9704217cc51f910ced5e02b79ea6fc0e6af546d3310421bcb38cc841ffc6e2e3f473b4bb52862bfca469e92723c05002ce78858630fb6eb7cf73745a2e42d858313be36fb77a726228df66dfb1d178fcdd44120c0012d92b0910098e9e276fe30026276cb25fcd062c3146ca3b29ca9c7f56ae078ce7fec396e10b6dfc15600e1a477335b219fde8bebd67dc5bc92c530db81c8e26b657d375ba39bc0acd475e9ab7ec16b514bbd6df010c245e1c76418ed3d76497add02544f95d80709ea749d0c2c46852149bc2050f865360e4f07ec5340ad69c10960a8b2b81c19152af3f77b8f20d46828ef7a46369f1707b85ff6425d764c7c344a6d6a6f265be939627f6bb4413a1ce4956b8e459d58d201d95ea0bb3f25d68506aaeb904f3a88b3ee81a7535d3e8a90f36424c5975cad2d4634937ab49e345589e72943262326983894166b902854103b851c22aeb473e51cc9f0e00d1feeeec541a81da1dcc3330fe55cfe105dc505e92990b1f1491cc39dc87c72367242183e6e6959fdeaf51b8fafcd429989597610e2bd72fd7787eaf8cc9eb17405e6c20631dd8e869c937a32a38e93f8629db12b9cb1819a65c43499a0bc5b3c4ea7fe6b8faee2a717ee9ab5d8eb9764ceef1b3745dc7a4c0abb48adc7f5f7a52733e2417506eb44acdbec66ac8c02613c55d2bd6e9f2ff427cac6eb263d720f0081f98fd713a1f6aa65529be9e4694541579edf19e3cf082d1d1c997edc51c522ce9c81c0a84a612ac5be2552863cd9c5e0d724a21e01a963b52be9e1748b506b29bbed2084948e56027f278c8b41e110c06d19d54ae714b2fa6644cdaa2da0558ada34dca5d5d4b08e0b9e8c0b08ad5f19ffbd9b22d3978b4b8419be39ca3121a0e0d122f515d1eeb74b02e504c8285fd401e3840dfbcc3af0f647763725a6a94044f307190315e2a40d6d0b8ad5acecad0ce594284a89a3b4234707e4ae54fa902f61bc9c496a7cdcc2649b023226624a78602ea41a8659b39861aa43cc10334edc55a65693590d60bb29523f2952c7c6116d2d4c84b0013ea01c412d54e5cda1d30918113aefa0fc40b097a5fede614c3e667fe8d6e6d871ca6b88275bb3c01f59f22fafbcd7111792b9a5aa23d7e66c8abcd2b90e816f79ccab789333a69bce4080d65a3b1abf8ea8236570945fb9941835335724ac960f617569ea018e5e450ada83447142fdec5ce6b081eb67bd3a1f46c221422ea6b268693e474b2d84e420a9a82b720d1f3e3906c1129708bcb19445f5e78d727e1bfe80955fb8665db45de80cc7331ef3d3288b5ee1c74efab97cc90f29c8b788c7c0d65dec98f59ada724e8db2c9264dd7c308a405f50c19ff7a59f26e8e93873f7a8be10e39a5687a88e7c988a2057b7442482feddc5669a95ebe1219530ae1f85988c803b32e3889cd434bbbd220437b7144abd526b7827ecc6fbb9aaca0b3d495e06cf2e24c855fb7cd15628feed57327a257208c2aa3dc579fcfaafbc6925ac459ae9c4f4a0ac9ae00c2bdfebb5c5ce079377bf56ffb6e8baf1f054f62e4867ace60d78095e0b223f049d54ece11e9aa4b5ad33043e5fc2524be524d9e5f1a85dbc202470e3659bbe0ee0d826cf365d7bbef7b21100d5c09c2c8aad5d5c24b281b7a4c630232789fb4c98a76e475fd438b0bd741c927cbce3333f3dbe6195917f5358c821dd8d5ee596ee5fe794693654de26599f70e9a970d7160495572d2f082426e3616adfad09c4f073f7c4bd2425f8fa937987a6a5d0cf4c555dcf572bcb97f54948696ae9c66d8162e35afee6564139daf9fdb446f616b954476d467c37828592a2048b2df890c0505287c763931e3"}}) [ 128.586619] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.593295] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.600065] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.606797] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.613475] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.620382] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.627123] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.633806] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:58 executing program 0: syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x0) 06:10:58 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x40001, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x4c400, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x11) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r3, 0x2, r5, 0x80000000}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x40001, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x4c400, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x11) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r3, 0x2, r5, 0x80000000}) (async) 06:10:58 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="ae4d2a2a4517a9537b8e9a634bd81c25c1d205d26e70dc73c39a88b624a8b4e645dbcfb55500e3c8e84c9d8833346b35e20470071f09c86a1b7a7b23a3fc51b4c04dfba9721f"], 0x4) 06:10:58 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x3, 0x2200) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:10:58 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="ae4d2a2a4517a9537b8e9a634bd81c25c1d205d26e70dc73c39a88b624a8b4e645dbcfb55500e3c8e84c9d8833346b35e20470071f09c86a1b7a7b23a3fc51b4c04dfba9721f"], 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="ae4d2a2a4517a9537b8e9a634bd81c25c1d205d26e70dc73c39a88b624a8b4e645dbcfb55500e3c8e84c9d8833346b35e20470071f09c86a1b7a7b23a3fc51b4c04dfba9721f"], 0x4) (async) 06:10:58 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004090) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9a4d5a863000500010602008f07"], 0xf) 06:10:58 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x3, 0x2200) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x2200) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) 06:10:58 executing program 4: connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'wg2\x00'}}, 0x1e) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x18007, 0x10, 0x5, 0xb, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x0, 0x81, 0x2f, 0x0, @empty, @multicast1}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESOCT=r0], 0x4) [ 128.640562] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.647887] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.654635] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.661313] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.672059] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xa4, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9a5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="c88c50a5adc396fd7e23f5538d5b07a5143ec1fd297043ce4b5c4b3a433a678b437e5266f09014d70bd498c3b57fa1366ce182afa2de01edb1c6fdc8f639b1cc36cb6a073a0bba964e53fcb166e87580b47555f16c414c762b5da1048ab67bab", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES32], 0x4) 06:10:58 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) r0 = mq_open(&(0x7f00000000c0)='\x00', 0x2, 0x0, &(0x7f0000000040)={0x401, 0x40, 0x1, 0x800}) mq_timedreceive(r0, &(0x7f0000000080)=""/54, 0x36, 0x40, 0x0) 06:10:58 executing program 0: syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x0) 06:10:58 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004090) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9a4d5a863000500010602008f07"], 0xf) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004090) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9a4d5a863000500010602008f07"], 0xf) (async) 06:10:58 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async, rerun: 32) r0 = mq_open(&(0x7f00000000c0)='\x00', 0x2, 0x0, &(0x7f0000000040)={0x401, 0x40, 0x1, 0x800}) (rerun: 32) mq_timedreceive(r0, &(0x7f0000000080)=""/54, 0x36, 0x40, 0x0) 06:10:58 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004090) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9a4d5a863000500010602008f07"], 0xf) [ 128.753139] Bluetooth: hci1 ACL packet for unknown connection handle 1225 [ 128.792477] Bluetooth: hci1 ACL packet for unknown connection handle 1225 06:10:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xa4, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9a5) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="c88c50a5adc396fd7e23f5538d5b07a5143ec1fd297043ce4b5c4b3a433a678b437e5266f09014d70bd498c3b57fa1366ce182afa2de01edb1c6fdc8f639b1cc36cb6a073a0bba964e53fcb166e87580b47555f16c414c762b5da1048ab67bab", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES32], 0x4) 06:10:58 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004090) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9a4d5a863000500010602008f07"], 0xf) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004090) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9a4d5a863000500010602008f07"], 0xf) (async) 06:10:58 executing program 2: syz_open_dev$media(&(0x7f0000000000), 0x3, 0x2200) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:10:58 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) r0 = mq_open(&(0x7f00000000c0)='\x00', 0x2, 0x0, &(0x7f0000000040)={0x401, 0x40, 0x1, 0x800}) mq_timedreceive(r0, &(0x7f0000000080)=""/54, 0x36, 0x40, 0x0) 06:10:58 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004090) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9a4d5a863000500010602008f07"], 0xf) [ 128.800114] Bluetooth: hci1 ACL packet for unknown connection handle 1225 [ 128.812313] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 128.829440] Bluetooth: hci5 ACL packet for unknown connection handle 1225 [ 128.838629] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:58 executing program 4: connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'wg2\x00'}}, 0x1e) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x18007, 0x10, 0x5, 0xb, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x0, 0x81, 0x2f, 0x0, @empty, @multicast1}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESOCT=r0], 0x4) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'wg2\x00'}}, 0x1e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x18007, 0x10, 0x5, 0xb, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x0, 0x81, 0x2f, 0x0, @empty, @multicast1}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESOCT=r0], 0x4) (async) 06:10:58 executing program 2: mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x1010, 0xffffffffffffffff, 0x3f) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7, 0x7, 0x3, 0x96, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x27, 0xfffffffffffffffc, [{0x2, 0x7, "3aca34609a"}, {0x1, 0x2}, {0x5, 0x3, 'W'}, {0x0, 0x4, "971d"}, {0x1, 0x11, "3969b6ed587a29b31f034e0a116b45"}]}]}}}}}) [ 128.867025] Bluetooth: hci1 ACL packet for unknown connection handle 1225 [ 128.883754] Bluetooth: hci1 ACL packet for unknown connection handle 1225 06:10:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40240) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1}, 0xc) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x2, 0x1, 0xa, 0x1, "2cdcac23a1406f477fab0df708000000f4ff00000000322e4406299f01ac2bc8943ce4ae3d816284cc415fc75203272f11579c5d4e67a4996110a23b5f882584", "7c685c82a61224afdb223d2f563050a38ba08746ddb53a2d27d36c5135d63197", [0x4f, 0x8]}) socket$kcm(0x29, 0x5, 0x0) 06:10:58 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="8d99fd8ff2e6c010504e2221bddf4edce01d03c49564", &(0x7f0000000040)="8b10ac1c964badd30cee360cf3d673ac750d659f0f32a65177a435d9d37640c87721f43f57f81bb17ab113a42baefca4952d931ddc2e34a92b3c6e6994acd8b294d977f3c8413fc684dc7abe984953d7bf4810a24dd8536ad328e448af08fd1b9b47a38e401377ac90a0ceb6fc70c5c351ac934a7a4e93fc1335bc924d9870677d1e6643b604bfc1799969d73e"}}) 06:10:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xa4, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9a5) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="c88c50a5adc396fd7e23f5538d5b07a5143ec1fd297043ce4b5c4b3a433a678b437e5266f09014d70bd498c3b57fa1366ce182afa2de01edb1c6fdc8f639b1cc36cb6a073a0bba964e53fcb166e87580b47555f16c414c762b5da1048ab67bab", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES32], 0x4) (rerun: 64) 06:10:58 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="8d99fd8ff2e6c010504e2221bddf4edce01d03c49564", &(0x7f0000000040)="8b10ac1c964badd30cee360cf3d673ac750d659f0f32a65177a435d9d37640c87721f43f57f81bb17ab113a42baefca4952d931ddc2e34a92b3c6e6994acd8b294d977f3c8413fc684dc7abe984953d7bf4810a24dd8536ad328e448af08fd1b9b47a38e401377ac90a0ceb6fc70c5c351ac934a7a4e93fc1335bc924d9870677d1e6643b604bfc1799969d73e"}}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="8d99fd8ff2e6c010504e2221bddf4edce01d03c49564", &(0x7f0000000040)="8b10ac1c964badd30cee360cf3d673ac750d659f0f32a65177a435d9d37640c87721f43f57f81bb17ab113a42baefca4952d931ddc2e34a92b3c6e6994acd8b294d977f3c8413fc684dc7abe984953d7bf4810a24dd8536ad328e448af08fd1b9b47a38e401377ac90a0ceb6fc70c5c351ac934a7a4e93fc1335bc924d9870677d1e6643b604bfc1799969d73e"}}) (async) [ 128.911923] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 128.936627] Bluetooth: hci5 ACL packet for unknown connection handle 1225 06:10:58 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004090) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9a4d5a863000500010602008f07"], 0xf) 06:10:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40240) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1}, 0xc) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x2, 0x1, 0xa, 0x1, "2cdcac23a1406f477fab0df708000000f4ff00000000322e4406299f01ac2bc8943ce4ae3d816284cc415fc75203272f11579c5d4e67a4996110a23b5f882584", "7c685c82a61224afdb223d2f563050a38ba08746ddb53a2d27d36c5135d63197", [0x4f, 0x8]}) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40240) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1}, 0xc) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x2, 0x1, 0xa, 0x1, "2cdcac23a1406f477fab0df708000000f4ff00000000322e4406299f01ac2bc8943ce4ae3d816284cc415fc75203272f11579c5d4e67a4996110a23b5f882584", "7c685c82a61224afdb223d2f563050a38ba08746ddb53a2d27d36c5135d63197", [0x4f, 0x8]}) (async) socket$kcm(0x29, 0x5, 0x0) (async) 06:10:58 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x8, 0x101}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0x1, 0xfff, '\x00', &(0x7f00000001c0)=0x9}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0xfff9, 0x5, 0x7, 0x6}, {0x3c, 0x6, 0x5c, 0x200}, {0xa, 0xf8, 0x3f, 0xfff}, {0xc9f, 0x0, 0x81, 0xf4}, {0x7ff, 0x0, 0x61, 0x400}, {0x0, 0x1f, 0x46, 0x3}, {0x9, 0x1, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000002c0)=r2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xffff, 0x8, 0x40, 0xafb}, {0xfeff, 0x6, 0x81, 0x8}, {0x8, 0x7, 0xe0, 0xfc72}, {0x800, 0x9, 0x8, 0x200}]}) [ 128.957089] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 128.981343] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 128.988522] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 128.997433] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.004551] Bluetooth: hci0 SCO packet for unknown connection handle 12288 06:10:58 executing program 2: mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x1010, 0xffffffffffffffff, 0x3f) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7, 0x7, 0x3, 0x96, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x27, 0xfffffffffffffffc, [{0x2, 0x7, "3aca34609a"}, {0x1, 0x2}, {0x5, 0x3, 'W'}, {0x0, 0x4, "971d"}, {0x1, 0x11, "3969b6ed587a29b31f034e0a116b45"}]}]}}}}}) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x1010, 0xffffffffffffffff, 0x3f) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7, 0x7, 0x3, 0x96, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x27, 0xfffffffffffffffc, [{0x2, 0x7, "3aca34609a"}, {0x1, 0x2}, {0x5, 0x3, 'W'}, {0x0, 0x4, "971d"}, {0x1, 0x11, "3969b6ed587a29b31f034e0a116b45"}]}]}}}}}) (async) 06:10:58 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="8d99fd8ff2e6c010504e2221bddf4edce01d03c49564", &(0x7f0000000040)="8b10ac1c964badd30cee360cf3d673ac750d659f0f32a65177a435d9d37640c87721f43f57f81bb17ab113a42baefca4952d931ddc2e34a92b3c6e6994acd8b294d977f3c8413fc684dc7abe984953d7bf4810a24dd8536ad328e448af08fd1b9b47a38e401377ac90a0ceb6fc70c5c351ac934a7a4e93fc1335bc924d9870677d1e6643b604bfc1799969d73e"}}) 06:10:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="116f69851b6cbe7d6a6ff2134a7f2b5cc934e96bb4372a6cee0e9044abc89d78047b8bb678dc509d4e", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0], 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) [ 129.011581] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.023442] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.030578] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.035698] Bluetooth: hci5 ACL packet for unknown connection handle 1225 [ 129.039706] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.051624] Bluetooth: hci0 SCO packet for unknown connection handle 12288 06:10:58 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004090) [ 129.059631] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.066762] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.073788] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.080942] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.088046] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.095293] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.097472] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:10:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40240) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1}, 0xc) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x2, 0x1, 0xa, 0x1, "2cdcac23a1406f477fab0df708000000f4ff00000000322e4406299f01ac2bc8943ce4ae3d816284cc415fc75203272f11579c5d4e67a4996110a23b5f882584", "7c685c82a61224afdb223d2f563050a38ba08746ddb53a2d27d36c5135d63197", [0x4f, 0x8]}) (async) socket$kcm(0x29, 0x5, 0x0) 06:10:58 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x8, 0x101}) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0x1, 0xfff, '\x00', &(0x7f00000001c0)=0x9}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0xfff9, 0x5, 0x7, 0x6}, {0x3c, 0x6, 0x5c, 0x200}, {0xa, 0xf8, 0x3f, 0xfff}, {0xc9f, 0x0, 0x81, 0xf4}, {0x7ff, 0x0, 0x61, 0x400}, {0x0, 0x1f, 0x46, 0x3}, {0x9, 0x1, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000002c0)=r2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xffff, 0x8, 0x40, 0xafb}, {0xfeff, 0x6, 0x81, 0x8}, {0x8, 0x7, 0xe0, 0xfc72}, {0x800, 0x9, 0x8, 0x200}]}) (rerun: 32) [ 129.102312] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.102327] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.102341] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.102356] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.137225] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.144327] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.151356] Bluetooth: hci0 SCO packet for unknown connection handle 12288 06:10:58 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x3a, 0x1}) 06:10:58 executing program 2: mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x1010, 0xffffffffffffffff, 0x3f) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7, 0x7, 0x3, 0x96, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x27, 0xfffffffffffffffc, [{0x2, 0x7, "3aca34609a"}, {0x1, 0x2}, {0x5, 0x3, 'W'}, {0x0, 0x4, "971d"}, {0x1, 0x11, "3969b6ed587a29b31f034e0a116b45"}]}]}}}}}) [ 129.158601] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.165710] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.172744] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.179837] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.186962] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.194554] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.201583] Bluetooth: hci0 SCO packet for unknown connection handle 12288 06:10:58 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1) 06:10:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="116f69851b6cbe7d6a6ff2134a7f2b5cc934e96bb4372a6cee0e9044abc89d78047b8bb678dc509d4e", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0], 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="116f69851b6cbe7d6a6ff2134a7f2b5cc934e96bb4372a6cee0e9044abc89d78047b8bb678dc509d4e", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) (async) [ 129.208712] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.215809] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.222853] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.229955] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.237043] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.244133] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.251161] Bluetooth: hci0 SCO packet for unknown connection handle 12288 06:10:58 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x4) 06:10:58 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x8, 0x101}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0x1, 0xfff, '\x00', &(0x7f00000001c0)=0x9}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0xfff9, 0x5, 0x7, 0x6}, {0x3c, 0x6, 0x5c, 0x200}, {0xa, 0xf8, 0x3f, 0xfff}, {0xc9f, 0x0, 0x81, 0xf4}, {0x7ff, 0x0, 0x61, 0x400}, {0x0, 0x1f, 0x46, 0x3}, {0x9, 0x1, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000002c0)=r2) (async) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xffff, 0x8, 0x40, 0xafb}, {0xfeff, 0x6, 0x81, 0x8}, {0x8, 0x7, 0xe0, 0xfc72}, {0x800, 0x9, 0x8, 0x200}]}) [ 129.258268] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.264956] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 129.265343] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.279012] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.286282] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.293308] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.300392] Bluetooth: hci0 SCO packet for unknown connection handle 12288 06:10:58 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r3, &(0x7f00000007c0), &(0x7f0000000b40)=[{{0x80000000}}]}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000c80)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r6, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r5, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r1) 06:10:58 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x3a, 0x1}) [ 129.307778] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.314922] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.321950] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.329580] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.336744] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.343770] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.350898] Bluetooth: hci0 SCO packet for unknown connection handle 12288 06:10:58 executing program 0: syz_emit_vhci(0x0, 0x1) 06:10:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="116f69851b6cbe7d6a6ff2134a7f2b5cc934e96bb4372a6cee0e9044abc89d78047b8bb678dc509d4e", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0], 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) 06:10:58 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x4) (async) [ 129.357985] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.365082] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.372120] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.379204] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.386304] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.393330] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.400492] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.407607] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.414747] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.421929] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.429157] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.436245] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.443273] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.444473] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 129.450370] Bluetooth: hci0 SCO packet for unknown connection handle 12288 06:10:58 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r3, &(0x7f00000007c0), &(0x7f0000000b40)=[{{0x80000000}}]}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000c80)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r6, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r5, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r3, &(0x7f00000007c0), &(0x7f0000000b40)}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000c80)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r6, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r5, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r1) (async) 06:10:58 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x3a, 0x1}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x3a, 0x1}) (async) 06:10:58 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x4) 06:10:58 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r3, &(0x7f00000007c0), &(0x7f0000000b40)=[{{0x80000000}}]}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000c80)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r6, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r5, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r1) 06:10:58 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x4) 06:10:58 executing program 1: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0xad, 0x0, 0x0, 0x7, 0x178d4dfd15bbdecc, "ea90e2b90904b790faebb65a9f823e4edfdc8541577fac6e04c2021ba7af7c08262d48b67d5eb945e176b15558f2bc27a66c70e436a996b62e18761b690beb56", "9e4cfb4a5536a115c212d910d2da2336f56f857fd1076509ba2fd8b6b9d1839b02a9c203b160b7dc9bc450c42094b6e029355db6db8647d1edf6bb11fe3cac1c", "4279b796978b63be0bab7ffbf6e41e253aaf923903071ce2abb1a9bdb4e30eba", [0x1, 0x3]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) [ 129.464675] Bluetooth: hci0 SCO packet for unknown connection handle 12288 [ 129.471709] Bluetooth: hci0 SCO packet for unknown connection handle 12288 06:10:59 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x4) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r3, &(0x7f00000007c0), &(0x7f0000000b40)=[{{0x80000000}}]}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000c80)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r6, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r5, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r1) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r3, &(0x7f00000007c0), &(0x7f0000000b40)=[{{0x80000000}}]}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000c80)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r6, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r5, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r1) 06:10:59 executing program 1: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0xad, 0x0, 0x0, 0x7, 0x178d4dfd15bbdecc, "ea90e2b90904b790faebb65a9f823e4edfdc8541577fac6e04c2021ba7af7c08262d48b67d5eb945e176b15558f2bc27a66c70e436a996b62e18761b690beb56", "9e4cfb4a5536a115c212d910d2da2336f56f857fd1076509ba2fd8b6b9d1839b02a9c203b160b7dc9bc450c42094b6e029355db6db8647d1edf6bb11fe3cac1c", "4279b796978b63be0bab7ffbf6e41e253aaf923903071ce2abb1a9bdb4e30eba", [0x1, 0x3]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) sysfs$1(0x1, &(0x7f0000000000)='\x00') socket$can_raw(0x1d, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) 06:10:59 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mq_notify(r0, &(0x7f00000015c0)={0x0, 0x1}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x442, 0x0) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3) socketpair(0x2, 0x5, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x77}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000003}, 0x40041) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="20002bbd7000fddbdf250400000005002100799b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008010) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r6) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000003c0)=""/104, 0x68, 0x10001, &(0x7f0000000440)={0x23, 0x9, 0x1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r7, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x42800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r3, 0x100, 0x80000}) 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) sysfs$1(0x1, &(0x7f0000000000)='\x00') (async) socket$can_raw(0x1d, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) 06:10:59 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x4) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/204, 0xcc, 0x1f, 0x0) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r3, &(0x7f00000007c0), &(0x7f0000000b40)=[{{0x80000000}}]}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000c80)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r6, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r5, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r1) 06:10:59 executing program 1: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0xad, 0x0, 0x0, 0x7, 0x178d4dfd15bbdecc, "ea90e2b90904b790faebb65a9f823e4edfdc8541577fac6e04c2021ba7af7c08262d48b67d5eb945e176b15558f2bc27a66c70e436a996b62e18761b690beb56", "9e4cfb4a5536a115c212d910d2da2336f56f857fd1076509ba2fd8b6b9d1839b02a9c203b160b7dc9bc450c42094b6e029355db6db8647d1edf6bb11fe3cac1c", "4279b796978b63be0bab7ffbf6e41e253aaf923903071ce2abb1a9bdb4e30eba", [0x1, 0x3]}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) sysfs$1(0x1, &(0x7f0000000000)='\x00') (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$key(0xf, 0x3, 0x2) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/204, 0xcc, 0x1f, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/204, 0xcc, 0x1f, 0x0) (async) 06:10:59 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1400}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r2, &(0x7f00000007c0), &(0x7f0000000b40)=[{{0x80000000}}]}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000c80)={r3, &(0x7f0000000bc0), &(0x7f0000000c00)}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r5, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r4, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mq_notify(r0, &(0x7f00000015c0)={0x0, 0x1}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x442, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3) (async) socketpair(0x2, 0x5, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x77}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000003}, 0x40041) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="20002bbd7000fddbdf250400000005002100799b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008010) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r6) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000003c0)=""/104, 0x68, 0x10001, &(0x7f0000000440)={0x23, 0x9, 0x1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r7, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x42800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r3, 0x100, 0x80000}) 06:10:59 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xee}, "627bc23d5145bdb823e837a3abe8b7d318d533341ecf0500967462dfb7661587e30101b86a66917443647312fd4984be8ea11ee9e95d56507bd982678fd7f9f38c03e1dfd31d01c657ce869242d5e2884a9a22b2aa10ed600b96563d0998b8cbea54f14d226c7d17ebc54374043a99a8b06b3bfe2c5d452a7fe5b3ae83e190dade60a3ea547b8dd50c9cbe227b0f89d6809a9b21fd74df903753e31f9833fb67909d17cd75681ca3f20ef962b807a8174aa82321cab41f3207d01f6a944a9cc96e4bad13156342ca94ccb289ca8f5f9d95a11e4159fb2b1942737b202524a594dc081db978cafd79eb2f4a97f314"}, 0xf2) 06:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1400}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/204, 0xcc, 0x1f, 0x0) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r2, &(0x7f00000007c0), &(0x7f0000000b40)=[{{0x80000000}}]}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000c80)={r3, &(0x7f0000000bc0), &(0x7f0000000c00)}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r5, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r4, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xee}, "627bc23d5145bdb823e837a3abe8b7d318d533341ecf0500967462dfb7661587e30101b86a66917443647312fd4984be8ea11ee9e95d56507bd982678fd7f9f38c03e1dfd31d01c657ce869242d5e2884a9a22b2aa10ed600b96563d0998b8cbea54f14d226c7d17ebc54374043a99a8b06b3bfe2c5d452a7fe5b3ae83e190dade60a3ea547b8dd50c9cbe227b0f89d6809a9b21fd74df903753e31f9833fb67909d17cd75681ca3f20ef962b807a8174aa82321cab41f3207d01f6a944a9cc96e4bad13156342ca94ccb289ca8f5f9d95a11e4159fb2b1942737b202524a594dc081db978cafd79eb2f4a97f314"}, 0xf2) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xee}, "627bc23d5145bdb823e837a3abe8b7d318d533341ecf0500967462dfb7661587e30101b86a66917443647312fd4984be8ea11ee9e95d56507bd982678fd7f9f38c03e1dfd31d01c657ce869242d5e2884a9a22b2aa10ed600b96563d0998b8cbea54f14d226c7d17ebc54374043a99a8b06b3bfe2c5d452a7fe5b3ae83e190dade60a3ea547b8dd50c9cbe227b0f89d6809a9b21fd74df903753e31f9833fb67909d17cd75681ca3f20ef962b807a8174aa82321cab41f3207d01f6a944a9cc96e4bad13156342ca94ccb289ca8f5f9d95a11e4159fb2b1942737b202524a594dc081db978cafd79eb2f4a97f314"}, 0xf2) (async) 06:10:59 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_timedreceive(r0, &(0x7f0000000000)=""/252, 0xfc, 0x6, &(0x7f0000000100)) setregid(0xee00, 0xee00) 06:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1400}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r2, &(0x7f00000007c0), &(0x7f0000000b40)=[{{0x80000000}}]}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000c80)={r3, &(0x7f0000000bc0), &(0x7f0000000c00)}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r4, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4a04, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf256788190b020000000c000f00020000000000000008000900048c93a39e1af8d298000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="7f"], 0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 06:10:59 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mq_notify(r0, &(0x7f00000015c0)={0x0, 0x1}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x442, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3) (async) socketpair(0x2, 0x5, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x77}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000003}, 0x40041) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="20002bbd7000fddbdf250400000005002100799b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008010) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r6) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000003c0)=""/104, 0x68, 0x10001, &(0x7f0000000440)={0x23, 0x9, 0x1}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r7, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x42800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r3, 0x100, 0x80000}) 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xee}, "627bc23d5145bdb823e837a3abe8b7d318d533341ecf0500967462dfb7661587e30101b86a66917443647312fd4984be8ea11ee9e95d56507bd982678fd7f9f38c03e1dfd31d01c657ce869242d5e2884a9a22b2aa10ed600b96563d0998b8cbea54f14d226c7d17ebc54374043a99a8b06b3bfe2c5d452a7fe5b3ae83e190dade60a3ea547b8dd50c9cbe227b0f89d6809a9b21fd74df903753e31f9833fb67909d17cd75681ca3f20ef962b807a8174aa82321cab41f3207d01f6a944a9cc96e4bad13156342ca94ccb289ca8f5f9d95a11e4159fb2b1942737b202524a594dc081db978cafd79eb2f4a97f314"}, 0xf2) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xee}, "627bc23d5145bdb823e837a3abe8b7d318d533341ecf0500967462dfb7661587e30101b86a66917443647312fd4984be8ea11ee9e95d56507bd982678fd7f9f38c03e1dfd31d01c657ce869242d5e2884a9a22b2aa10ed600b96563d0998b8cbea54f14d226c7d17ebc54374043a99a8b06b3bfe2c5d452a7fe5b3ae83e190dade60a3ea547b8dd50c9cbe227b0f89d6809a9b21fd74df903753e31f9833fb67909d17cd75681ca3f20ef962b807a8174aa82321cab41f3207d01f6a944a9cc96e4bad13156342ca94ccb289ca8f5f9d95a11e4159fb2b1942737b202524a594dc081db978cafd79eb2f4a97f314"}, 0xf2) (async) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) (async, rerun: 32) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_timedreceive(r0, &(0x7f0000000000)=""/252, 0xfc, 0x6, &(0x7f0000000100)) (async) setregid(0xee00, 0xee00) 06:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_info_req={{0xa, 0x81, 0x2}, {0x20}}, @l2cap_cmd_rej_unk={{0x1, 0x42, 0x2}, {0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x3f}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x5af7, 0x7fff, 0x24}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0x9, 0x9}}]}}, 0x32) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r2, &(0x7f00000007c0), &(0x7f0000000b40)}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r3, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4a04, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf256788190b020000000c000f00020000000000000008000900048c93a39e1af8d298000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="7f"], 0x4) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 06:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_info_req={{0xa, 0x81, 0x2}, {0x20}}, @l2cap_cmd_rej_unk={{0x1, 0x42, 0x2}, {0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x3f}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x5af7, 0x7fff, 0x24}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0x9, 0x9}}]}}, 0x32) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_info_req={{0xa, 0x81, 0x2}, {0x20}}, @l2cap_cmd_rej_unk={{0x1, 0x42, 0x2}, {0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x3f}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x5af7, 0x7fff, 0x24}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0x9, 0x9}}]}}, 0x32) (async) 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) socket$inet6(0xa, 0x5, 0x6) 06:10:59 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/48, 0x30, 0x1, &(0x7f0000000040)=""/251, 0xfb}, &(0x7f0000000180)=0x40) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r2, &(0x7f00000007c0), &(0x7f0000000b40)}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r3, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mq_timedreceive(r0, &(0x7f0000000000)=""/252, 0xfc, 0x6, &(0x7f0000000100)) setregid(0xee00, 0xee00) 06:10:59 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4a04, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf256788190b020000000c000f00020000000000000008000900048c93a39e1af8d298000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="7f"], 0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 06:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_info_req={{0xa, 0x81, 0x2}, {0x20}}, @l2cap_cmd_rej_unk={{0x1, 0x42, 0x2}, {0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x3f}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x5af7, 0x7fff, 0x24}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0x9, 0x9}}]}}, 0x32) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_info_req={{0xa, 0x81, 0x2}, {0x20}}, @l2cap_cmd_rej_unk={{0x1, 0x42, 0x2}, {0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x3f}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x5af7, 0x7fff, 0x24}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0x9, 0x9}}]}}, 0x32) (async) 06:10:59 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/48, 0x30, 0x1, &(0x7f0000000040)=""/251, 0xfb}, &(0x7f0000000180)=0x40) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:10:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r2, &(0x7f00000007c0), &(0x7f0000000b40)}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16=r3, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="c0da00b8a63d908bd100"], 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x34}}, 0x80) 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) socket$inet6(0xa, 0x5, 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) socket$inet6(0xa, 0x5, 0x6) (async) 06:10:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:10:59 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="c0da00b8a63d908bd100"], 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x34}}, 0x80) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="c0da00b8a63d908bd100"], 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x34}}, 0x80) (async) 06:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ptrace(0x10, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:10:59 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/48, 0x30, 0x1, &(0x7f0000000040)=""/251, 0xfb}, &(0x7f0000000180)=0x40) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x80000000}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r2, &(0x7f00000007c0), &(0x7f0000000b40)}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) ptrace(0x10, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:10:59 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) tgkill(0x0, r0, 0x28) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) bind$can_raw(r1, &(0x7f0000000100), 0x10) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) mq_open(&(0x7f0000000000)='-}]\x96%]^1{\x00', 0x80, 0x150, &(0x7f0000000040)={0x1000, 0x81, 0x0, 0x400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048810}, 0x40000) 06:10:59 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="c0da00b8a63d908bd100"], 0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x34}}, 0x80) 06:10:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) 06:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ptrace(0x10, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000740)={0x0, 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) socket$inet6(0xa, 0x5, 0x6) 06:10:59 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) tgkill(0x0, r0, 0x28) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) bind$can_raw(r1, &(0x7f0000000100), 0x10) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) mq_open(&(0x7f0000000000)='-}]\x96%]^1{\x00', 0x80, 0x150, &(0x7f0000000040)={0x1000, 0x81, 0x0, 0x400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048810}, 0x40000) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0xfffffffffffffdab, 0x7, 0x0) r0 = mq_open(&(0x7f0000000000)='@,,\x00', 0x8f42e11f39a834bd, 0x40, &(0x7f0000000040)={0x7fffffffffffffff, 0x0, 0x101, 0xcff}) syz_open_dev$vcsn(&(0x7f0000000100), 0x4, 0x4002) mq_getsetattr(r0, &(0x7f0000000080)={0x6, 0xff, 0x0, 0x401}, &(0x7f00000000c0)) 06:10:59 executing program 4: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\b'], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf25030000000500220000000000080009000300000008000900040000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000054}, 0xc001) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fedbdf25020000001400200020010000000000000000000000000000ffffffffffffff00"], 0x30}}, 0x40c0) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x4) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0xfffffffffffffdab, 0x7, 0x0) r0 = mq_open(&(0x7f0000000000)='@,,\x00', 0x8f42e11f39a834bd, 0x40, &(0x7f0000000040)={0x7fffffffffffffff, 0x0, 0x101, 0xcff}) syz_open_dev$vcsn(&(0x7f0000000100), 0x4, 0x4002) mq_getsetattr(r0, &(0x7f0000000080)={0x6, 0xff, 0x0, 0x401}, &(0x7f00000000c0)) mq_timedsend(0xffffffffffffffff, 0x0, 0xfffffffffffffdab, 0x7, 0x0) (async) mq_open(&(0x7f0000000000)='@,,\x00', 0x8f42e11f39a834bd, 0x40, &(0x7f0000000040)={0x7fffffffffffffff, 0x0, 0x101, 0xcff}) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x4, 0x4002) (async) mq_getsetattr(r0, &(0x7f0000000080)={0x6, 0xff, 0x0, 0x401}, &(0x7f00000000c0)) (async) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) 06:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf25030000000500220000000000080009000300000008000900040000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000054}, 0xc001) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fedbdf25020000001400200020010000000000000000000000000000ffffffffffffff00"], 0x30}}, 0x40c0) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x4) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 130.357062] Bluetooth: hci0: Received unexpected HCI Event 00000000 06:10:59 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) tgkill(0x0, r0, 0x28) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) bind$can_raw(r1, &(0x7f0000000100), 0x10) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) mq_open(&(0x7f0000000000)='-}]\x96%]^1{\x00', 0x80, 0x150, &(0x7f0000000040)={0x1000, 0x81, 0x0, 0x400}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048810}, 0x40000) 06:10:59 executing program 4: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\b'], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\b'], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 06:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf25030000000500220000000000080009000300000008000900040000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000054}, 0xc001) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fedbdf25020000001400200020010000000000000000000000000000ffffffffffffff00"], 0x30}}, 0x40c0) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf25030000000500220000000000080009000300000008000900040000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000054}, 0xc001) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fedbdf25020000001400200020010000000000000000000000000000ffffffffffffff00"], 0x30}}, 0x40c0) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x4) (async) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0xfffffffffffffdab, 0x7, 0x0) r0 = mq_open(&(0x7f0000000000)='@,,\x00', 0x8f42e11f39a834bd, 0x40, &(0x7f0000000040)={0x7fffffffffffffff, 0x0, 0x101, 0xcff}) syz_open_dev$vcsn(&(0x7f0000000100), 0x4, 0x4002) mq_getsetattr(r0, &(0x7f0000000080)={0x6, 0xff, 0x0, 0x401}, &(0x7f00000000c0)) mq_timedsend(0xffffffffffffffff, 0x0, 0xfffffffffffffdab, 0x7, 0x0) (async) mq_open(&(0x7f0000000000)='@,,\x00', 0x8f42e11f39a834bd, 0x40, &(0x7f0000000040)={0x7fffffffffffffff, 0x0, 0x101, 0xcff}) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x4, 0x4002) (async) mq_getsetattr(r0, &(0x7f0000000080)={0x6, 0xff, 0x0, 0x401}, &(0x7f00000000c0)) (async) 06:10:59 executing program 4: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\b'], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\b'], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) [ 130.399407] Bluetooth: hci0: Received unexpected HCI Event 00000000 06:10:59 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) (async) 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) 06:10:59 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0xfffffffe, 0x1, @thr={&(0x7f0000000180)="be604deb82c602a660156864d7c00335165bdbf4a575a4104acad92e3041fce48cabedfa291d70db40adefea41317b2e5188f14ebbc50ee5de68bf9e3336e631d9a21c5c97bab180c1f02c3822d04cadd10957d3ff1ca49585ce83d7c6b338db2e0acedd8f81a0f5c96afa0daf241defdcba447294fcdd236ce3539d2de0a38121be186526cd5ad821331576132d2072b51a9546c39975d15d967dae", &(0x7f0000000380)="4012d46af5462afbb63ebc6feb84d44fcd5d97a2161774ff81beaae045d4cda4a53779f40d91ae14c8aafe5fedda3f9f77c8f4634984dee95ccfe20992981157f0c892ac42e572adeafd848d5268950219fcffca5d22f7c802793025b4613740a44bac8da6247d3ff731a383fb00eb63926bbbf3b3e58e49060289f74f213e5a918db9e09ef283c3a4bdb2bdb1796abca28fcebdc928df64bf3161483fa160b2275671a204b185ab70b9fb7ec9396392ddf938a0106a34a0f77f8b4a2d2b436a532f3d90bd2be7ccf6cad200"/225}}) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x22, 0x1, @thr={&(0x7f0000000000)="bef5d9860c2dcad202c10cf0e5d3e46f6ec6d00c4bb649af17a845e2b0470145e6cdd6128b9ac472f246c7a78ba67f6fbf8647c7d1796e8cefdbcfed1e0731", &(0x7f0000000040)="bb58cfc3f9987c12592871722397ad107e2e"}}) mq_open(&(0x7f00000000c0)='@%\'(^\x00', 0x2, 0xe2, &(0x7f0000000100)={0x6, 0x4, 0xffffffffffffffff, 0x1}) 06:10:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xf7}, @l2cap_cid_signaling={{0xf3}, [@l2cap_disconn_rsp={{0x7, 0x5f, 0x4}, {0x1, 0xaf7}}, @l2cap_info_rsp={{0xb, 0x0, 0xce}, {0x5, 0x53d, "6878775b9aeba9814a55d95c73674820aa38b7a8a8dc0ab4472ca2ba09226515d5bf2a61a648241c9be717cd5b082d9847362385fc4bb50364be406b33cf0e4ba5746fb5c24b288716a2d4e576676958702db90a6ec7ab4a7ffb51924fa8bfc4733ba2ff0a431ac0f387993a06d3e372a8f987d2d776cdb1df760771fa40529d9d0d5664df16d278e0b65f159b162231e5fd6bb39fc7478c7a083b65b94cec345fc9815c3cefc4e9412ea26cc99eb6b9cba41f2164b3ea72218b7514ce804229bf08e1717461ff76c9fb"}}, @l2cap_conf_rsp={{0x5, 0x8, 0xd}, {0x3ff, 0xff, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x81}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_disconn_rsp={{0x7, 0x1f, 0x4}, {0x80, 0x73}}]}}, 0xfc) [ 130.452794] Bluetooth: hci0: Received unexpected HCI Event 00000000 06:10:59 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:10:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 06:10:59 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) (async) 06:11:00 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xf7}, @l2cap_cid_signaling={{0xf3}, [@l2cap_disconn_rsp={{0x7, 0x5f, 0x4}, {0x1, 0xaf7}}, @l2cap_info_rsp={{0xb, 0x0, 0xce}, {0x5, 0x53d, "6878775b9aeba9814a55d95c73674820aa38b7a8a8dc0ab4472ca2ba09226515d5bf2a61a648241c9be717cd5b082d9847362385fc4bb50364be406b33cf0e4ba5746fb5c24b288716a2d4e576676958702db90a6ec7ab4a7ffb51924fa8bfc4733ba2ff0a431ac0f387993a06d3e372a8f987d2d776cdb1df760771fa40529d9d0d5664df16d278e0b65f159b162231e5fd6bb39fc7478c7a083b65b94cec345fc9815c3cefc4e9412ea26cc99eb6b9cba41f2164b3ea72218b7514ce804229bf08e1717461ff76c9fb"}}, @l2cap_conf_rsp={{0x5, 0x8, 0xd}, {0x3ff, 0xff, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x81}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_disconn_rsp={{0x7, 0x1f, 0x4}, {0x80, 0x73}}]}}, 0xfc) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0xfffffffe, 0x1, @thr={&(0x7f0000000180)="be604deb82c602a660156864d7c00335165bdbf4a575a4104acad92e3041fce48cabedfa291d70db40adefea41317b2e5188f14ebbc50ee5de68bf9e3336e631d9a21c5c97bab180c1f02c3822d04cadd10957d3ff1ca49585ce83d7c6b338db2e0acedd8f81a0f5c96afa0daf241defdcba447294fcdd236ce3539d2de0a38121be186526cd5ad821331576132d2072b51a9546c39975d15d967dae", &(0x7f0000000380)="4012d46af5462afbb63ebc6feb84d44fcd5d97a2161774ff81beaae045d4cda4a53779f40d91ae14c8aafe5fedda3f9f77c8f4634984dee95ccfe20992981157f0c892ac42e572adeafd848d5268950219fcffca5d22f7c802793025b4613740a44bac8da6247d3ff731a383fb00eb63926bbbf3b3e58e49060289f74f213e5a918db9e09ef283c3a4bdb2bdb1796abca28fcebdc928df64bf3161483fa160b2275671a204b185ab70b9fb7ec9396392ddf938a0106a34a0f77f8b4a2d2b436a532f3d90bd2be7ccf6cad200"/225}}) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x22, 0x1, @thr={&(0x7f0000000000)="bef5d9860c2dcad202c10cf0e5d3e46f6ec6d00c4bb649af17a845e2b0470145e6cdd6128b9ac472f246c7a78ba67f6fbf8647c7d1796e8cefdbcfed1e0731", &(0x7f0000000040)="bb58cfc3f9987c12592871722397ad107e2e"}}) mq_open(&(0x7f00000000c0)='@%\'(^\x00', 0x2, 0xe2, &(0x7f0000000100)={0x6, 0x4, 0xffffffffffffffff, 0x1}) 06:11:00 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xf7}, @l2cap_cid_signaling={{0xf3}, [@l2cap_disconn_rsp={{0x7, 0x5f, 0x4}, {0x1, 0xaf7}}, @l2cap_info_rsp={{0xb, 0x0, 0xce}, {0x5, 0x53d, "6878775b9aeba9814a55d95c73674820aa38b7a8a8dc0ab4472ca2ba09226515d5bf2a61a648241c9be717cd5b082d9847362385fc4bb50364be406b33cf0e4ba5746fb5c24b288716a2d4e576676958702db90a6ec7ab4a7ffb51924fa8bfc4733ba2ff0a431ac0f387993a06d3e372a8f987d2d776cdb1df760771fa40529d9d0d5664df16d278e0b65f159b162231e5fd6bb39fc7478c7a083b65b94cec345fc9815c3cefc4e9412ea26cc99eb6b9cba41f2164b3ea72218b7514ce804229bf08e1717461ff76c9fb"}}, @l2cap_conf_rsp={{0x5, 0x8, 0xd}, {0x3ff, 0xff, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x81}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_disconn_rsp={{0x7, 0x1f, 0x4}, {0x80, 0x73}}]}}, 0xfc) 06:11:00 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) 06:11:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x4) (async, rerun: 32) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 06:11:00 executing program 5: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0xfffffffe, 0x1, @thr={&(0x7f0000000180)="be604deb82c602a660156864d7c00335165bdbf4a575a4104acad92e3041fce48cabedfa291d70db40adefea41317b2e5188f14ebbc50ee5de68bf9e3336e631d9a21c5c97bab180c1f02c3822d04cadd10957d3ff1ca49585ce83d7c6b338db2e0acedd8f81a0f5c96afa0daf241defdcba447294fcdd236ce3539d2de0a38121be186526cd5ad821331576132d2072b51a9546c39975d15d967dae", &(0x7f0000000380)="4012d46af5462afbb63ebc6feb84d44fcd5d97a2161774ff81beaae045d4cda4a53779f40d91ae14c8aafe5fedda3f9f77c8f4634984dee95ccfe20992981157f0c892ac42e572adeafd848d5268950219fcffca5d22f7c802793025b4613740a44bac8da6247d3ff731a383fb00eb63926bbbf3b3e58e49060289f74f213e5a918db9e09ef283c3a4bdb2bdb1796abca28fcebdc928df64bf3161483fa160b2275671a204b185ab70b9fb7ec9396392ddf938a0106a34a0f77f8b4a2d2b436a532f3d90bd2be7ccf6cad200"/225}}) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x22, 0x1, @thr={&(0x7f0000000000)="bef5d9860c2dcad202c10cf0e5d3e46f6ec6d00c4bb649af17a845e2b0470145e6cdd6128b9ac472f246c7a78ba67f6fbf8647c7d1796e8cefdbcfed1e0731", &(0x7f0000000040)="bb58cfc3f9987c12592871722397ad107e2e"}}) (async) mq_open(&(0x7f00000000c0)='@%\'(^\x00', 0x2, 0xe2, &(0x7f0000000100)={0x6, 0x4, 0xffffffffffffffff, 0x1}) 06:11:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) (async) 06:11:00 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="1f557dac53c8001000003c93eab16626861d4afc7cab2f263a5eed50b35a5012f578a080cb76e044d48370c6c9ad0e488e5db80e9ba49ed4850c38410bcbe8"], 0x4) 06:11:00 executing program 2: rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x3b, &(0x7f0000000000)={0x16, 0x8b0, 0x8}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000100)='\xf8\x00', 0x80, 0x102, &(0x7f0000000140)={0x2, 0x100, 0xffff, 0x3}) mq_notify(r0, &(0x7f0000000300)={0x0, 0x19, 0x4, @thr={&(0x7f0000000180)="10884662be8ca8bfab548c2140f59a477a8ca7d86d7608421d899920b84bea05ac7a0d6d2fed750f14da6b3861a110be9b8a39186c4a312f9e537ca742313bfdb8ca7b785e01536ca579039b064ae3b1217244ed38fed0ffddcf7dbfc7276850425b8a91a53982d7fc9508f7dcf48767dc9c8101f799e3748f12ee6143273f6f4d2e2d4a2d48e7cd8e1957b279cc83be08b3a2ac4085f434b5614966d2cc1767071e29871a1de223f2b1d38bb63e32ded1aa01597480671284e3f1d69d9f15ddfccfca7712edd4035e36b85a044bbf7685bc2fb83763aac1d8abc0", &(0x7f0000000280)="447ab71711888a860054db332b0d6a0dfc3e121af3cf590771dc2a1d94a6dd3b1e3642024e22b468c54720f3a5fb4e64c189c294d2b177eeb1bb42b4ae005ea78b93da1fc7676cf0cf74a1ac0dda66b4ec8fb2accf846c4501f4b829295f5ba084743469b7d6af7827588a938388036a2a062afedc"}}) r1 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r2, 0x2a, &(0x7f0000000080)={0x1e, 0xffffffff, 0x7b5}) 06:11:00 executing program 5: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:00 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="1f557dac53c8001000003c93eab16626861d4afc7cab2f263a5eed50b35a5012f578a080cb76e044d48370c6c9ad0e488e5db80e9ba49ed4850c38410bcbe8"], 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="1f557dac53c8001000003c93eab16626861d4afc7cab2f263a5eed50b35a5012f578a080cb76e044d48370c6c9ad0e488e5db80e9ba49ed4850c38410bcbe8"], 0x4) (async) 06:11:00 executing program 2: rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x3b, &(0x7f0000000000)={0x16, 0x8b0, 0x8}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000100)='\xf8\x00', 0x80, 0x102, &(0x7f0000000140)={0x2, 0x100, 0xffff, 0x3}) mq_notify(r0, &(0x7f0000000300)={0x0, 0x19, 0x4, @thr={&(0x7f0000000180)="10884662be8ca8bfab548c2140f59a477a8ca7d86d7608421d899920b84bea05ac7a0d6d2fed750f14da6b3861a110be9b8a39186c4a312f9e537ca742313bfdb8ca7b785e01536ca579039b064ae3b1217244ed38fed0ffddcf7dbfc7276850425b8a91a53982d7fc9508f7dcf48767dc9c8101f799e3748f12ee6143273f6f4d2e2d4a2d48e7cd8e1957b279cc83be08b3a2ac4085f434b5614966d2cc1767071e29871a1de223f2b1d38bb63e32ded1aa01597480671284e3f1d69d9f15ddfccfca7712edd4035e36b85a044bbf7685bc2fb83763aac1d8abc0", &(0x7f0000000280)="447ab71711888a860054db332b0d6a0dfc3e121af3cf590771dc2a1d94a6dd3b1e3642024e22b468c54720f3a5fb4e64c189c294d2b177eeb1bb42b4ae005ea78b93da1fc7676cf0cf74a1ac0dda66b4ec8fb2accf846c4501f4b829295f5ba084743469b7d6af7827588a938388036a2a062afedc"}}) r1 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r2, 0x2a, &(0x7f0000000080)={0x1e, 0xffffffff, 0x7b5}) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x3b, &(0x7f0000000000)={0x16, 0x8b0, 0x8}) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) mq_open(&(0x7f0000000100)='\xf8\x00', 0x80, 0x102, &(0x7f0000000140)={0x2, 0x100, 0xffff, 0x3}) (async) mq_notify(r0, &(0x7f0000000300)={0x0, 0x19, 0x4, @thr={&(0x7f0000000180)="10884662be8ca8bfab548c2140f59a477a8ca7d86d7608421d899920b84bea05ac7a0d6d2fed750f14da6b3861a110be9b8a39186c4a312f9e537ca742313bfdb8ca7b785e01536ca579039b064ae3b1217244ed38fed0ffddcf7dbfc7276850425b8a91a53982d7fc9508f7dcf48767dc9c8101f799e3748f12ee6143273f6f4d2e2d4a2d48e7cd8e1957b279cc83be08b3a2ac4085f434b5614966d2cc1767071e29871a1de223f2b1d38bb63e32ded1aa01597480671284e3f1d69d9f15ddfccfca7712edd4035e36b85a044bbf7685bc2fb83763aac1d8abc0", &(0x7f0000000280)="447ab71711888a860054db332b0d6a0dfc3e121af3cf590771dc2a1d94a6dd3b1e3642024e22b468c54720f3a5fb4e64c189c294d2b177eeb1bb42b4ae005ea78b93da1fc7676cf0cf74a1ac0dda66b4ec8fb2accf846c4501f4b829295f5ba084743469b7d6af7827588a938388036a2a062afedc"}}) (async) getpgrp(0xffffffffffffffff) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) (async) getpgrp(0x0) (async) rt_tgsigqueueinfo(r1, r2, 0x2a, &(0x7f0000000080)={0x1e, 0xffffffff, 0x7b5}) (async) 06:11:00 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0xffffffff}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2a6f2d7d, 0xf2e2, 0x7}, 0x0) 06:11:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300), 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bind$phonet(r1, &(0x7f0000000080)={0x23, 0xff, 0x7f, 0x40}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x404c014) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0xed1bf00bfe9d8539, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048850}, 0x4004000) 06:11:00 executing program 5: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) getpgrp(0xffffffffffffffff) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="1f557dac53c8001000003c93eab16626861d4afc7cab2f263a5eed50b35a5012f578a080cb76e044d48370c6c9ad0e488e5db80e9ba49ed4850c38410bcbe8"], 0x4) 06:11:00 executing program 2: rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x3b, &(0x7f0000000000)={0x16, 0x8b0, 0x8}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000100)='\xf8\x00', 0x80, 0x102, &(0x7f0000000140)={0x2, 0x100, 0xffff, 0x3}) mq_notify(r0, &(0x7f0000000300)={0x0, 0x19, 0x4, @thr={&(0x7f0000000180)="10884662be8ca8bfab548c2140f59a477a8ca7d86d7608421d899920b84bea05ac7a0d6d2fed750f14da6b3861a110be9b8a39186c4a312f9e537ca742313bfdb8ca7b785e01536ca579039b064ae3b1217244ed38fed0ffddcf7dbfc7276850425b8a91a53982d7fc9508f7dcf48767dc9c8101f799e3748f12ee6143273f6f4d2e2d4a2d48e7cd8e1957b279cc83be08b3a2ac4085f434b5614966d2cc1767071e29871a1de223f2b1d38bb63e32ded1aa01597480671284e3f1d69d9f15ddfccfca7712edd4035e36b85a044bbf7685bc2fb83763aac1d8abc0", &(0x7f0000000280)="447ab71711888a860054db332b0d6a0dfc3e121af3cf590771dc2a1d94a6dd3b1e3642024e22b468c54720f3a5fb4e64c189c294d2b177eeb1bb42b4ae005ea78b93da1fc7676cf0cf74a1ac0dda66b4ec8fb2accf846c4501f4b829295f5ba084743469b7d6af7827588a938388036a2a062afedc"}}) r1 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r2, 0x2a, &(0x7f0000000080)={0x1e, 0xffffffff, 0x7b5}) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x3b, &(0x7f0000000000)={0x16, 0x8b0, 0x8}) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) mq_open(&(0x7f0000000100)='\xf8\x00', 0x80, 0x102, &(0x7f0000000140)={0x2, 0x100, 0xffff, 0x3}) (async) mq_notify(r0, &(0x7f0000000300)={0x0, 0x19, 0x4, @thr={&(0x7f0000000180)="10884662be8ca8bfab548c2140f59a477a8ca7d86d7608421d899920b84bea05ac7a0d6d2fed750f14da6b3861a110be9b8a39186c4a312f9e537ca742313bfdb8ca7b785e01536ca579039b064ae3b1217244ed38fed0ffddcf7dbfc7276850425b8a91a53982d7fc9508f7dcf48767dc9c8101f799e3748f12ee6143273f6f4d2e2d4a2d48e7cd8e1957b279cc83be08b3a2ac4085f434b5614966d2cc1767071e29871a1de223f2b1d38bb63e32ded1aa01597480671284e3f1d69d9f15ddfccfca7712edd4035e36b85a044bbf7685bc2fb83763aac1d8abc0", &(0x7f0000000280)="447ab71711888a860054db332b0d6a0dfc3e121af3cf590771dc2a1d94a6dd3b1e3642024e22b468c54720f3a5fb4e64c189c294d2b177eeb1bb42b4ae005ea78b93da1fc7676cf0cf74a1ac0dda66b4ec8fb2accf846c4501f4b829295f5ba084743469b7d6af7827588a938388036a2a062afedc"}}) (async) getpgrp(0xffffffffffffffff) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) (async) getpgrp(0x0) (async) rt_tgsigqueueinfo(r1, r2, 0x2a, &(0x7f0000000080)={0x1e, 0xffffffff, 0x7b5}) (async) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0xffffffff}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2a6f2d7d, 0xf2e2, 0x7}, 0x0) 06:11:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300), 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bind$phonet(r1, &(0x7f0000000080)={0x23, 0xff, 0x7f, 0x40}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x404c014) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0xed1bf00bfe9d8539, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048850}, 0x4004000) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300), 0x4) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) bind$phonet(r1, &(0x7f0000000080)={0x23, 0xff, 0x7f, 0x40}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x404c014) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0xed1bf00bfe9d8539, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048850}, 0x4004000) (async) 06:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 130.778925] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:00 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x8}, 0x8) 06:11:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mq_timedsend(r1, 0x0, 0x0, 0x8, 0x0) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0xffffffff}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2a6f2d7d, 0xf2e2, 0x7}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0xffffffff}) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2a6f2d7d, 0xf2e2, 0x7}, 0x0) (async) 06:11:00 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300), 0x4) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bind$phonet(r1, &(0x7f0000000080)={0x23, 0xff, 0x7f, 0x40}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x404c014) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0xed1bf00bfe9d8539, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048850}, 0x4004000) 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x8}, 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x8}, 0x8) (async) [ 130.872225] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:00 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) (async) 06:11:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mq_timedsend(r1, 0x0, 0x0, 0x8, 0x0) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x1, 0x45306996}, &(0x7f0000000040)) 06:11:00 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x8}, 0x8) (rerun: 32) 06:11:00 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) (async) 06:11:00 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbfd, {0x2, 0x10, 0x90, 0xff, 0x46, 0x0, 0x0, 0x5, 0x14}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40009045}, 0x4011) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x81}) 06:11:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mq_timedsend(r1, 0x0, 0x0, 0x8, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mq_timedsend(r1, 0x0, 0x0, 0x8, 0x0) (async) 06:11:00 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x1, 0x45306996}, &(0x7f0000000040)) [ 130.979012] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x143402) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) 06:11:00 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbfd, {0x2, 0x10, 0x90, 0xff, 0x46, 0x0, 0x0, 0x5, 0x14}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40009045}, 0x4011) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x81}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbfd, {0x2, 0x10, 0x90, 0xff, 0x46, 0x0, 0x0, 0x5, 0x14}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40009045}, 0x4011) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x81}) (async) 06:11:00 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2c, 0x24, &(0x7f0000000040)="40d26164e614fb39a0b5283b91697ee260fb1db6fd2a39daad1cff276bd59ffb39e07b9e008959cf2c43716b", &(0x7f0000000080)=""/36, 0x4, 0x0, 0x0, 0xed, &(0x7f00000000c0), &(0x7f0000000100)="b2537f181d0f64b1a16e11c33eadbbc2134a17141457d4f2dc739dc365c4730d327e10b36ececf616d792ceba64bbd83ed9dada4bc3138368c8585ab7a57c9da91d8311227835e68efb1e467aeaa65be833716a6493126487d6d0314cdc165c3d1b6be1103872dadd9e39b62c0b0dfb27418772b05d91f7eee3e474a3cffa9f945a9fa2afb2b0b6aa4129f72d7d859e72fd03824235bf802b3879db3f9a75b513e950513c8d8d615ae1c7a3c31badb317cd5dcc1b9a4d0835b7854ee38cf0d8eaf9a1a4f2384c30d8330ba599759669e87d1c99718fdea2928b6c9f6f7b468326c35d5236920dd5207e932c7c3", 0x1, 0xd51f}, 0x48) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x1, 0x45306996}, &(0x7f0000000040)) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x1, 0x45306996}, &(0x7f0000000040)) (async) 06:11:00 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x111002, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x4048040) 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x143402) (async) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) 06:11:00 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbfd, {0x2, 0x10, 0x90, 0xff, 0x46, 0x0, 0x0, 0x5, 0x14}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40009045}, 0x4011) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x7, 0x81}) (rerun: 64) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x25}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 06:11:00 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x111002, 0x0) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x4048040) 06:11:00 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2c, 0x24, &(0x7f0000000040)="40d26164e614fb39a0b5283b91697ee260fb1db6fd2a39daad1cff276bd59ffb39e07b9e008959cf2c43716b", &(0x7f0000000080)=""/36, 0x4, 0x0, 0x0, 0xed, &(0x7f00000000c0), &(0x7f0000000100)="b2537f181d0f64b1a16e11c33eadbbc2134a17141457d4f2dc739dc365c4730d327e10b36ececf616d792ceba64bbd83ed9dada4bc3138368c8585ab7a57c9da91d8311227835e68efb1e467aeaa65be833716a6493126487d6d0314cdc165c3d1b6be1103872dadd9e39b62c0b0dfb27418772b05d91f7eee3e474a3cffa9f945a9fa2afb2b0b6aa4129f72d7d859e72fd03824235bf802b3879db3f9a75b513e950513c8d8d615ae1c7a3c31badb317cd5dcc1b9a4d0835b7854ee38cf0d8eaf9a1a4f2384c30d8330ba599759669e87d1c99718fdea2928b6c9f6f7b468326c35d5236920dd5207e932c7c3", 0x1, 0xd51f}, 0x48) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) 06:11:00 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) (async) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x143402) (async) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) 06:11:00 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000000)=[0x9, 0x1, 0x7fffffff, 0x7844, 0x1, 0x41, 0x7f, 0x293]) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x25}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 06:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x4048040) 06:11:00 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x111002, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x111002, 0x0) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) 06:11:00 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2c, 0x24, &(0x7f0000000040)="40d26164e614fb39a0b5283b91697ee260fb1db6fd2a39daad1cff276bd59ffb39e07b9e008959cf2c43716b", &(0x7f0000000080)=""/36, 0x4, 0x0, 0x0, 0xed, &(0x7f00000000c0), &(0x7f0000000100)="b2537f181d0f64b1a16e11c33eadbbc2134a17141457d4f2dc739dc365c4730d327e10b36ececf616d792ceba64bbd83ed9dada4bc3138368c8585ab7a57c9da91d8311227835e68efb1e467aeaa65be833716a6493126487d6d0314cdc165c3d1b6be1103872dadd9e39b62c0b0dfb27418772b05d91f7eee3e474a3cffa9f945a9fa2afb2b0b6aa4129f72d7d859e72fd03824235bf802b3879db3f9a75b513e950513c8d8d615ae1c7a3c31badb317cd5dcc1b9a4d0835b7854ee38cf0d8eaf9a1a4f2384c30d8330ba599759669e87d1c99718fdea2928b6c9f6f7b468326c35d5236920dd5207e932c7c3", 0x1, 0xd51f}, 0x48) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) 06:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x4) 06:11:00 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000000)=[0x9, 0x1, 0x7fffffff, 0x7844, 0x1, 0x41, 0x7f, 0x293]) 06:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16, @ANYBLOB="040028bd7000fcdbdf250100000005001400d700000006000300070000000500040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:00 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x25}, 0x10) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 06:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x4) 06:11:00 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="c482db88a564", 'veth1\x00'}}) getrusage(0x0, &(0x7f0000000040)) 06:11:00 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="02005c2bbd7000ffcbdf2502000000060003000000001173ad61e6a403fd3035b918911de4f67f0c9870958f77111df255bae6ea7a75408fe17f59aaee5cb778af88392f63f103354704c87aabc9178091eb173bc76dff30173b45b16cc150fa03fdd0388b5c0ab652bcf573c064432b3a4f9f4d659f64011cf85eca3a4207cf6122d8890582f5a411bd4da63b0c13c7272d4269d739fca70106fe38e34146c60f395d537cb7bee4ae816049fb27f1ee42a4a05f143d144b0a1b4a602a45874d0d96614e454e1d985d7631fae02ff6a1153cbdb912b4f2338216dba0d535d3757a5c"], 0x1c}}, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 131.276672] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.312474] Bluetooth: hci0 SCO packet for unknown connection handle 0 06:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:00 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async, rerun: 32) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000000)=[0x9, 0x1, 0x7fffffff, 0x7844, 0x1, 0x41, 0x7f, 0x293]) 06:11:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x4) (async) 06:11:00 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8000, 0x7, '\x00', &(0x7f0000000040)=0x5}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0xa001, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x16, 0xd, "529665a91c4824e2fec771413e11562e78205c8435dacac320a1e9eacfb4d8e89f508bde896a837cf227d3ef1725c1be4249690b06419340607cc91efb5a9336", "079324d4d1c35000eca37c2697e1d0e34418d45af2df392b525f2594dbe0bb57451c708dae371673a2b588751618e14197dc6415ffda26477b322b0fca79ca1d", "b1d52bd2de4c682d0b6ade23979b60a68d846b4e7973995d1c04bfd9f206f21f", [0x800, 0xffffffff]}) 06:11:00 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="c482db88a564", 'veth1\x00'}}) (async) getrusage(0x0, &(0x7f0000000040)) [ 131.357873] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.376415] Bluetooth: hci0 SCO packet for unknown connection handle 0 06:11:00 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="02005c2bbd7000ffcbdf2502000000060003000000001173ad61e6a403fd3035b918911de4f67f0c9870958f77111df255bae6ea7a75408fe17f59aaee5cb778af88392f63f103354704c87aabc9178091eb173bc76dff30173b45b16cc150fa03fdd0388b5c0ab652bcf573c064432b3a4f9f4d659f64011cf85eca3a4207cf6122d8890582f5a411bd4da63b0c13c7272d4269d739fca70106fe38e34146c60f395d537cb7bee4ae816049fb27f1ee42a4a05f143d144b0a1b4a602a45874d0d96614e454e1d985d7631fae02ff6a1153cbdb912b4f2338216dba0d535d3757a5c"], 0x1c}}, 0x0) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 131.437053] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.441092] Bluetooth: hci0 SCO packet for unknown connection handle 0 [ 131.443824] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.457225] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.458935] Bluetooth: hci0 SCO packet for unknown connection handle 0 [ 131.466299] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.477654] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.484444] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.491126] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.498421] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.505192] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.511873] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.518666] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.525527] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:00 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffffffffffffffbf, 0x0, 0xa, 0x800e, 0x1d9a4f6846cdb272, "897005f90a19935398c354000fc2971f3b34bbfa2b524d94cf7fc0d0a3a3e87bd05b8641559babebc442ea242adbbaf50921a8ad0315468a6a0a6c6d2a21704d", "fe46c873778f3e314f72d581a128e457d4a3d080ab9b25bc44ccd27869bde8c1e0f07bb44b54d8e1f36188df58e117b3588a8a32861a70df239f6c6b19b77f2f", "f2f5a9b03761097f4ec0b347d8238f4b38949ba56a321b9dae28ea724cf94ed7", [0x20, 0x8e64]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:00 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="c482db88a564", 'veth1\x00'}}) getrusage(0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="c482db88a564", 'veth1\x00'}}) (async) getrusage(0x0, &(0x7f0000000040)) (async) 06:11:01 executing program 4: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="854ae84910d57c34f4a87fee969d", @ANYBLOB="d080d528b04d955bead00896a355acc43d10049f8a017992e0d46faf40af454175ff17cb16367ae56a4403c1d4365db519fbc2", @ANYRESOCT, @ANYBLOB="d3e87711c7df7abca54b8f53e61d4d5690158e979a924ca549a6952920a7704745e319f0725caadda869680f65be1d87cd4cdbfa6cbaee3838dc7c2793644d22e8a8d8807dad991e785e9ccb7a963a16060dc24d15a45f723d716c477b876aca8aec2d9c7a73eabbf47f"], 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x400, 0x400) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) 06:11:01 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8000, 0x7, '\x00', &(0x7f0000000040)=0x5}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0xa001, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x16, 0xd, "529665a91c4824e2fec771413e11562e78205c8435dacac320a1e9eacfb4d8e89f508bde896a837cf227d3ef1725c1be4249690b06419340607cc91efb5a9336", "079324d4d1c35000eca37c2697e1d0e34418d45af2df392b525f2594dbe0bb57451c708dae371673a2b588751618e14197dc6415ffda26477b322b0fca79ca1d", "b1d52bd2de4c682d0b6ade23979b60a68d846b4e7973995d1c04bfd9f206f21f", [0x800, 0xffffffff]}) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8000, 0x7, '\x00', &(0x7f0000000040)=0x5}) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0xa001, 0x0) (async) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x16, 0xd, "529665a91c4824e2fec771413e11562e78205c8435dacac320a1e9eacfb4d8e89f508bde896a837cf227d3ef1725c1be4249690b06419340607cc91efb5a9336", "079324d4d1c35000eca37c2697e1d0e34418d45af2df392b525f2594dbe0bb57451c708dae371673a2b588751618e14197dc6415ffda26477b322b0fca79ca1d", "b1d52bd2de4c682d0b6ade23979b60a68d846b4e7973995d1c04bfd9f206f21f", [0x800, 0xffffffff]}) (async) [ 131.532219] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.539382] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.546186] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.552881] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.559674] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.566424] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.573109] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.579912] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="02005c2bbd7000ffcbdf2502000000060003000000001173ad61e6a403fd3035b918911de4f67f0c9870958f77111df255bae6ea7a75408fe17f59aaee5cb778af88392f63f103354704c87aabc9178091eb173bc76dff30173b45b16cc150fa03fdd0388b5c0ab652bcf573c064432b3a4f9f4d659f64011cf85eca3a4207cf6122d8890582f5a411bd4da63b0c13c7272d4269d739fca70106fe38e34146c60f395d537cb7bee4ae816049fb27f1ee42a4a05f143d144b0a1b4a602a45874d0d96614e454e1d985d7631fae02ff6a1153cbdb912b4f2338216dba0d535d3757a5c"], 0x1c}}, 0x0) (async, rerun: 32) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (rerun: 32) [ 131.586650] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.593328] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.600601] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.607366] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.614231] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.620915] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.631342] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:01 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffffffffffffffbf, 0x0, 0xa, 0x800e, 0x1d9a4f6846cdb272, "897005f90a19935398c354000fc2971f3b34bbfa2b524d94cf7fc0d0a3a3e87bd05b8641559babebc442ea242adbbaf50921a8ad0315468a6a0a6c6d2a21704d", "fe46c873778f3e314f72d581a128e457d4a3d080ab9b25bc44ccd27869bde8c1e0f07bb44b54d8e1f36188df58e117b3588a8a32861a70df239f6c6b19b77f2f", "f2f5a9b03761097f4ec0b347d8238f4b38949ba56a321b9dae28ea724cf94ed7", [0x20, 0x8e64]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffffffffffffffbf, 0x0, 0xa, 0x800e, 0x1d9a4f6846cdb272, "897005f90a19935398c354000fc2971f3b34bbfa2b524d94cf7fc0d0a3a3e87bd05b8641559babebc442ea242adbbaf50921a8ad0315468a6a0a6c6d2a21704d", "fe46c873778f3e314f72d581a128e457d4a3d080ab9b25bc44ccd27869bde8c1e0f07bb44b54d8e1f36188df58e117b3588a8a32861a70df239f6c6b19b77f2f", "f2f5a9b03761097f4ec0b347d8238f4b38949ba56a321b9dae28ea724cf94ed7", [0x20, 0x8e64]}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:11:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x3, 0x0, 0x7f, 0x3}, {0x200, 0x1, 0x8, 0x6b4d11a0}, {0x2, 0x1f, 0x2, 0x1f}, {0x6, 0x8, 0x6, 0x80}, {0x9, 0x40, 0x5f, 0x4}, {0x800, 0x5, 0x6, 0x80000071}, {0xff, 0x7, 0x6, 0x9}]}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004000) sendmsg$L2TP_CMD_NOOP(r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r4, &(0x7f00000000c0)={r0, r0, 0x1}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) 06:11:01 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8000, 0x7, '\x00', &(0x7f0000000040)=0x5}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0xa001, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x16, 0xd, "529665a91c4824e2fec771413e11562e78205c8435dacac320a1e9eacfb4d8e89f508bde896a837cf227d3ef1725c1be4249690b06419340607cc91efb5a9336", "079324d4d1c35000eca37c2697e1d0e34418d45af2df392b525f2594dbe0bb57451c708dae371673a2b588751618e14197dc6415ffda26477b322b0fca79ca1d", "b1d52bd2de4c682d0b6ade23979b60a68d846b4e7973995d1c04bfd9f206f21f", [0x800, 0xffffffff]}) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8000, 0x7, '\x00', &(0x7f0000000040)=0x5}) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0xa001, 0x0) (async) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x16, 0xd, "529665a91c4824e2fec771413e11562e78205c8435dacac320a1e9eacfb4d8e89f508bde896a837cf227d3ef1725c1be4249690b06419340607cc91efb5a9336", "079324d4d1c35000eca37c2697e1d0e34418d45af2df392b525f2594dbe0bb57451c708dae371673a2b588751618e14197dc6415ffda26477b322b0fca79ca1d", "b1d52bd2de4c682d0b6ade23979b60a68d846b4e7973995d1c04bfd9f206f21f", [0x800, 0xffffffff]}) (async) 06:11:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 4: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="854ae84910d57c34f4a87fee969d", @ANYBLOB="d080d528b04d955bead00896a355acc43d10049f8a017992e0d46faf40af454175ff17cb16367ae56a4403c1d4365db519fbc2", @ANYRESOCT, @ANYBLOB="d3e87711c7df7abca54b8f53e61d4d5690158e979a924ca549a6952920a7704745e319f0725caadda869680f65be1d87cd4cdbfa6cbaee3838dc7c2793644d22e8a8d8807dad991e785e9ccb7a963a16060dc24d15a45f723d716c477b876aca8aec2d9c7a73eabbf47f"], 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x400, 0x400) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="854ae84910d57c34f4a87fee969d", @ANYBLOB="d080d528b04d955bead00896a355acc43d10049f8a017992e0d46faf40af454175ff17cb16367ae56a4403c1d4365db519fbc2", @ANYRESOCT, @ANYBLOB="d3e87711c7df7abca54b8f53e61d4d5690158e979a924ca549a6952920a7704745e319f0725caadda869680f65be1d87cd4cdbfa6cbaee3838dc7c2793644d22e8a8d8807dad991e785e9ccb7a963a16060dc24d15a45f723d716c477b876aca8aec2d9c7a73eabbf47f"], 0x4) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x400, 0x400) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) (async) [ 131.638192] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.645022] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.645037] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.645051] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.645065] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 131.645078] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x3, 0x0, 0x7f, 0x3}, {0x200, 0x1, 0x8, 0x6b4d11a0}, {0x2, 0x1f, 0x2, 0x1f}, {0x6, 0x8, 0x6, 0x80}, {0x9, 0x40, 0x5f, 0x4}, {0x800, 0x5, 0x6, 0x80000071}, {0xff, 0x7, 0x6, 0x9}]}) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004000) (async) sendmsg$L2TP_CMD_NOOP(r4, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r4, &(0x7f00000000c0)={r0, r0, 0x1}) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) 06:11:01 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffffffffffffffbf, 0x0, 0xa, 0x800e, 0x1d9a4f6846cdb272, "897005f90a19935398c354000fc2971f3b34bbfa2b524d94cf7fc0d0a3a3e87bd05b8641559babebc442ea242adbbaf50921a8ad0315468a6a0a6c6d2a21704d", "fe46c873778f3e314f72d581a128e457d4a3d080ab9b25bc44ccd27869bde8c1e0f07bb44b54d8e1f36188df58e117b3588a8a32861a70df239f6c6b19b77f2f", "f2f5a9b03761097f4ec0b347d8238f4b38949ba56a321b9dae28ea724cf94ed7", [0x20, 0x8e64]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffffffffffffffbf, 0x0, 0xa, 0x800e, 0x1d9a4f6846cdb272, "897005f90a19935398c354000fc2971f3b34bbfa2b524d94cf7fc0d0a3a3e87bd05b8641559babebc442ea242adbbaf50921a8ad0315468a6a0a6c6d2a21704d", "fe46c873778f3e314f72d581a128e457d4a3d080ab9b25bc44ccd27869bde8c1e0f07bb44b54d8e1f36188df58e117b3588a8a32861a70df239f6c6b19b77f2f", "f2f5a9b03761097f4ec0b347d8238f4b38949ba56a321b9dae28ea724cf94ed7", [0x20, 0x8e64]}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:11:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 4: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="854ae84910d57c34f4a87fee969d", @ANYBLOB="d080d528b04d955bead00896a355acc43d10049f8a017992e0d46faf40af454175ff17cb16367ae56a4403c1d4365db519fbc2", @ANYRESOCT, @ANYBLOB="d3e87711c7df7abca54b8f53e61d4d5690158e979a924ca549a6952920a7704745e319f0725caadda869680f65be1d87cd4cdbfa6cbaee3838dc7c2793644d22e8a8d8807dad991e785e9ccb7a963a16060dc24d15a45f723d716c477b876aca8aec2d9c7a73eabbf47f"], 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x400, 0x400) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="854ae84910d57c34f4a87fee969d", @ANYBLOB="d080d528b04d955bead00896a355acc43d10049f8a017992e0d46faf40af454175ff17cb16367ae56a4403c1d4365db519fbc2", @ANYRESOCT, @ANYBLOB="d3e87711c7df7abca54b8f53e61d4d5690158e979a924ca549a6952920a7704745e319f0725caadda869680f65be1d87cd4cdbfa6cbaee3838dc7c2793644d22e8a8d8807dad991e785e9ccb7a963a16060dc24d15a45f723d716c477b876aca8aec2d9c7a73eabbf47f"], 0x4) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x400, 0x400) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) (async) 06:11:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x3, 0x0, 0x7f, 0x3}, {0x200, 0x1, 0x8, 0x6b4d11a0}, {0x2, 0x1f, 0x2, 0x1f}, {0x6, 0x8, 0x6, 0x80}, {0x9, 0x40, 0x5f, 0x4}, {0x800, 0x5, 0x6, 0x80000071}, {0xff, 0x7, 0x6, 0x9}]}) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004000) sendmsg$L2TP_CMD_NOOP(r4, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r4, &(0x7f00000000c0)={r0, r0, 0x1}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) 06:11:01 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_open(&(0x7f0000000180)='l2tp\x00', 0x800, 0x4, &(0x7f00000001c0)={0x9, 0x9, 0x2, 0x7}) r1 = getpgrp(0xffffffffffffffff) mq_notify(r0, &(0x7f0000000100)={0x0, 0x2a, 0x2, @tid=r1}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000040)={{0x5, @addr=0x831}, 0x8, 0x4, 0x1000}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) mq_getsetattr(r3, &(0x7f0000000080)={0x80000000, 0x4, 0x7, 0x5}, &(0x7f00000000c0)) 06:11:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x5, 0xffff0000, 0x2c, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xe}, 0x48) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0008002000000000000000034b79006c0065000005049078ac1e0101e000000144145263e000000100000003ac1414bb000000009407755162419294040100890b4e640101020a010102440cbc4000000100ffa8ce1fc51330ac1414bbac141410ac1414bb0a01010200005d002000"/120]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000300)="7584e52b0b667c0f8a3b028fbec26e6da44b7e038722b21e64c3b1f14faf200c84cb816c19cdf8074c7ca6e60f064bef8bbe54c51f14ec2db8afbad08c208d72e0add77ea0a070d0997ccd11663dc537698af6711d7d21006147774da822be150b61f77e0b6fa496728a1b06dac28aff56820b7c7b446b7444fe17d3a0dfccc6ef2cc8d687f7c15548dc9791590088ec73b9131704f52c", &(0x7f00000003c0)=@udp6, 0x2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000540)={0x1f, @none, 0x20}, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x2, 0x9, {{0x28, 0x4, 0x1, 0x5, 0xa0, 0x8067, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x20, 0x3, 0x3, [{@local, 0x7fffffff}, {@multicast2, 0x1a6}, {@local, 0x6}, {@multicast2, 0xffffffff}, {@broadcast, 0xfffffffa}, {@multicast1}]}, @ra={0x94, 0x4, 0x1001}, @rr={0x7, 0x3, 0xce}, @timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast2, 0x1}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x40, 0x0, 0x0, [0x2, 0x1e72, 0x9, 0x0, 0x200, 0xffff3542]}, @timestamp_addr={0x44, 0x1c, 0x26, 0x1, 0x2, [{@multicast2, 0x4}, {@multicast2, 0x5}, {@broadcast, 0x4}]}]}}}}}) mq_timedsend(r2, &(0x7f0000000580)="43e60946270ec9e41a30ba3f645d15d4", 0x10, 0x9, &(0x7f00000005c0)={0x0, 0x989680}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="73797a746e6cf5db00000000000400007f0a2bb1db6ee040119c7856f1f9ea532a69e367b8374bed20ba77a79f7f61d4eca3246c3039050000e5bf434a59f9847b7ad6d346e94ab14715f7dbaa8ae46243d8704bb12ad69fd3457f60fcf195d95a1d2d606c17377a6f7cda9ec70bd3c77259de7094e4623f804d609ed771463f27a51ad224db63635915f73311abb2caf988a6a12c6052bbeb7a8707148e51181ed7ba69d6ebbda319611cddb8", @ANYRES32=r8, @ANYBLOB="8000001000000000000000094c0c00b000640000400490787f000001ac141432442c2da1ac1414aa000000057f000001000000006401010000010001e00000010000000100000000000000084424af63e0000001000004000a01010000000003e0000002000003fee0000001000000040144209d8000000101000000040000918e000000030000800100000800000000ff440c7b500000006100000005831f3664010100e0000002ac1e0101ffffffffac1e01017f000001e0000001"]}) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000180", @ANYRES16=r7, @ANYBLOB="00042bbd7000fddbdf2505000000060001000500000008000b0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xfffffffffffffe1e) 06:11:01 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x120, 0x120, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0xfc000000}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x8, [0x2e, 0x6, 0x1a, 0x1c, 0x2f, 0xa, 0xf, 0x29, 0xc, 0x36, 0x29, 0x24, 0x14, 0x6, 0x3, 0x36], 0x0, 0x3c, 0x8001}}}, {{@ip={@loopback, @broadcast, 0x0, 0xff, 'ip6gretap0\x00', '\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x6c}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "4fb6"}}, @common=@ttl={{0x28}, {0x3, 0x2f}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xc, 0x5, 0x230aef47, 0xba15, 0x6c, 0x0, 0x1a22, 0xb7]}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x0, 0x3, 0x4], 0x4, 0x1}, {0x0, [0x3, 0x2, 0x2, 0x0, 0x2, 0x7], 0x5, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd2d, 0x25dfdbff, {0x2, 0x14, 0x20, 0x81, 0x3f, 0x0, 0x0, 0x3, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) 06:11:01 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "bf42221c42aeaffd458d34bd99290ceeeeb5a0e4d6d6e7ed76eb1c4fae99bee47efd89f814c45f932d07dac75cfe4e0fdfc7e3579a071608486002c016dce86944a554479d373c5a89ef105843be7bc8ba3f70fc2d5fc60e1a28b32712732e2968b75a1e414358b417497f132685fae3a3"}, 0x75) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x67}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0xc2, &(0x7f0000000140)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x2, 0x802, 0xbf}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) socket$inet6_tcp(0xa, 0x1, 0x0) mq_open(&(0x7f0000000380)='\x00', 0x40, 0x10, &(0x7f00000003c0)={0x6, 0x55f, 0x7ff, 0x9}) 06:11:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x200) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3", @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mq_open(&(0x7f0000000180)='l2tp\x00', 0x800, 0x4, &(0x7f00000001c0)={0x9, 0x9, 0x2, 0x7}) r1 = getpgrp(0xffffffffffffffff) mq_notify(r0, &(0x7f0000000100)={0x0, 0x2a, 0x2, @tid=r1}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000040)={{0x5, @addr=0x831}, 0x8, 0x4, 0x1000}) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) mq_getsetattr(r3, &(0x7f0000000080)={0x80000000, 0x4, 0x7, 0x5}, &(0x7f00000000c0)) 06:11:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x5, 0xffff0000, 0x2c, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xe}, 0x48) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0008002000000000000000034b79006c0065000005049078ac1e0101e000000144145263e000000100000003ac1414bb000000009407755162419294040100890b4e640101020a010102440cbc4000000100ffa8ce1fc51330ac1414bbac141410ac1414bb0a01010200005d002000"/120]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000300)="7584e52b0b667c0f8a3b028fbec26e6da44b7e038722b21e64c3b1f14faf200c84cb816c19cdf8074c7ca6e60f064bef8bbe54c51f14ec2db8afbad08c208d72e0add77ea0a070d0997ccd11663dc537698af6711d7d21006147774da822be150b61f77e0b6fa496728a1b06dac28aff56820b7c7b446b7444fe17d3a0dfccc6ef2cc8d687f7c15548dc9791590088ec73b9131704f52c", &(0x7f00000003c0)=@udp6, 0x2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000540)={0x1f, @none, 0x20}, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x2, 0x9, {{0x28, 0x4, 0x1, 0x5, 0xa0, 0x8067, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x20, 0x3, 0x3, [{@local, 0x7fffffff}, {@multicast2, 0x1a6}, {@local, 0x6}, {@multicast2, 0xffffffff}, {@broadcast, 0xfffffffa}, {@multicast1}]}, @ra={0x94, 0x4, 0x1001}, @rr={0x7, 0x3, 0xce}, @timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast2, 0x1}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x40, 0x0, 0x0, [0x2, 0x1e72, 0x9, 0x0, 0x200, 0xffff3542]}, @timestamp_addr={0x44, 0x1c, 0x26, 0x1, 0x2, [{@multicast2, 0x4}, {@multicast2, 0x5}, {@broadcast, 0x4}]}]}}}}}) mq_timedsend(r2, &(0x7f0000000580)="43e60946270ec9e41a30ba3f645d15d4", 0x10, 0x9, &(0x7f00000005c0)={0x0, 0x989680}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="73797a746e6cf5db00000000000400007f0a2bb1db6ee040119c7856f1f9ea532a69e367b8374bed20ba77a79f7f61d4eca3246c3039050000e5bf434a59f9847b7ad6d346e94ab14715f7dbaa8ae46243d8704bb12ad69fd3457f60fcf195d95a1d2d606c17377a6f7cda9ec70bd3c77259de7094e4623f804d609ed771463f27a51ad224db63635915f73311abb2caf988a6a12c6052bbeb7a8707148e51181ed7ba69d6ebbda319611cddb8", @ANYRES32=r8, @ANYBLOB="8000001000000000000000094c0c00b000640000400490787f000001ac141432442c2da1ac1414aa000000057f000001000000006401010000010001e00000010000000100000000000000084424af63e0000001000004000a01010000000003e0000002000003fee0000001000000040144209d8000000101000000040000918e000000030000800100000800000000ff440c7b500000006100000005831f3664010100e0000002ac1e0101ffffffffac1e01017f000001e0000001"]}) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000180", @ANYRES16=r7, @ANYBLOB="00042bbd7000fddbdf2505000000060001000500000008000b0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xfffffffffffffe1e) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x5, 0xffff0000, 0x2c, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xe}, 0x48) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0008002000000000000000034b79006c0065000005049078ac1e0101e000000144145263e000000100000003ac1414bb000000009407755162419294040100890b4e640101020a010102440cbc4000000100ffa8ce1fc51330ac1414bbac141410ac1414bb0a01010200005d002000"/120]}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000300)="7584e52b0b667c0f8a3b028fbec26e6da44b7e038722b21e64c3b1f14faf200c84cb816c19cdf8074c7ca6e60f064bef8bbe54c51f14ec2db8afbad08c208d72e0add77ea0a070d0997ccd11663dc537698af6711d7d21006147774da822be150b61f77e0b6fa496728a1b06dac28aff56820b7c7b446b7444fe17d3a0dfccc6ef2cc8d687f7c15548dc9791590088ec73b9131704f52c", &(0x7f00000003c0)=@udp6, 0x2}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) connect$bt_rfcomm(r4, &(0x7f0000000540)={0x1f, @none, 0x20}, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r6) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x2, 0x9, {{0x28, 0x4, 0x1, 0x5, 0xa0, 0x8067, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x20, 0x3, 0x3, [{@local, 0x7fffffff}, {@multicast2, 0x1a6}, {@local, 0x6}, {@multicast2, 0xffffffff}, {@broadcast, 0xfffffffa}, {@multicast1}]}, @ra={0x94, 0x4, 0x1001}, @rr={0x7, 0x3, 0xce}, @timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast2, 0x1}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x40, 0x0, 0x0, [0x2, 0x1e72, 0x9, 0x0, 0x200, 0xffff3542]}, @timestamp_addr={0x44, 0x1c, 0x26, 0x1, 0x2, [{@multicast2, 0x4}, {@multicast2, 0x5}, {@broadcast, 0x4}]}]}}}}}) (async) mq_timedsend(r2, &(0x7f0000000580)="43e60946270ec9e41a30ba3f645d15d4", 0x10, 0x9, &(0x7f00000005c0)={0x0, 0x989680}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="73797a746e6cf5db00000000000400007f0a2bb1db6ee040119c7856f1f9ea532a69e367b8374bed20ba77a79f7f61d4eca3246c3039050000e5bf434a59f9847b7ad6d346e94ab14715f7dbaa8ae46243d8704bb12ad69fd3457f60fcf195d95a1d2d606c17377a6f7cda9ec70bd3c77259de7094e4623f804d609ed771463f27a51ad224db63635915f73311abb2caf988a6a12c6052bbeb7a8707148e51181ed7ba69d6ebbda319611cddb8", @ANYRES32=r8, @ANYBLOB="8000001000000000000000094c0c00b000640000400490787f000001ac141432442c2da1ac1414aa000000057f000001000000006401010000010001e00000010000000100000000000000084424af63e0000001000004000a01010000000003e0000002000003fee0000001000000040144209d8000000101000000040000918e000000030000800100000800000000ff440c7b500000006100000005831f3664010100e0000002ac1e0101ffffffffac1e01017f000001e0000001"]}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000180", @ANYRES16=r7, @ANYBLOB="00042bbd7000fddbdf2505000000060001000500000008000b0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xfffffffffffffe1e) (async) 06:11:01 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "bf42221c42aeaffd458d34bd99290ceeeeb5a0e4d6d6e7ed76eb1c4fae99bee47efd89f814c45f932d07dac75cfe4e0fdfc7e3579a071608486002c016dce86944a554479d373c5a89ef105843be7bc8ba3f70fc2d5fc60e1a28b32712732e2968b75a1e414358b417497f132685fae3a3"}, 0x75) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x67}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0xc2, &(0x7f0000000140)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x2, 0x802, 0xbf}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) socket$inet6_tcp(0xa, 0x1, 0x0) mq_open(&(0x7f0000000380)='\x00', 0x40, 0x10, &(0x7f00000003c0)={0x6, 0x55f, 0x7ff, 0x9}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x4) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "bf42221c42aeaffd458d34bd99290ceeeeb5a0e4d6d6e7ed76eb1c4fae99bee47efd89f814c45f932d07dac75cfe4e0fdfc7e3579a071608486002c016dce86944a554479d373c5a89ef105843be7bc8ba3f70fc2d5fc60e1a28b32712732e2968b75a1e414358b417497f132685fae3a3"}, 0x75) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x67}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0xc2, &(0x7f0000000140)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x2, 0x802, 0xbf}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mq_open(&(0x7f0000000380)='\x00', 0x40, 0x10, &(0x7f00000003c0)={0x6, 0x55f, 0x7ff, 0x9}) (async) 06:11:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x200) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x200) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) (async) 06:11:01 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x120, 0x120, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0xfc000000}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x8, [0x2e, 0x6, 0x1a, 0x1c, 0x2f, 0xa, 0xf, 0x29, 0xc, 0x36, 0x29, 0x24, 0x14, 0x6, 0x3, 0x36], 0x0, 0x3c, 0x8001}}}, {{@ip={@loopback, @broadcast, 0x0, 0xff, 'ip6gretap0\x00', '\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x6c}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "4fb6"}}, @common=@ttl={{0x28}, {0x3, 0x2f}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xc, 0x5, 0x230aef47, 0xba15, 0x6c, 0x0, 0x1a22, 0xb7]}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x0, 0x3, 0x4], 0x4, 0x1}, {0x0, [0x3, 0x2, 0x2, 0x0, 0x2, 0x7], 0x5, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd2d, 0x25dfdbff, {0x2, 0x14, 0x20, 0x81, 0x3f, 0x0, 0x0, 0x3, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) 06:11:01 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async, rerun: 32) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async, rerun: 64) mq_open(&(0x7f0000000180)='l2tp\x00', 0x800, 0x4, &(0x7f00000001c0)={0x9, 0x9, 0x2, 0x7}) (async, rerun: 64) r1 = getpgrp(0xffffffffffffffff) mq_notify(r0, &(0x7f0000000100)={0x0, 0x2a, 0x2, @tid=r1}) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000040)={{0x5, @addr=0x831}, 0x8, 0x4, 0x1000}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) (async) mq_getsetattr(r3, &(0x7f0000000080)={0x80000000, 0x4, 0x7, 0x5}, &(0x7f00000000c0)) 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe96411f6b1271a56f9edd49d217bbf069775d0b4b9694f2e28efd133dd72f4730e371833092d8c154ce2873a2a93b9cd333bccc92425567c4295eeb42d84b287219c15acf7140c47f1eb2a3"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 131.931240] x_tables: ip_tables: osf match: only valid for protocol 6 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x5, 0xffff0000, 0x2c, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xe}, 0x48) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0008002000000000000000034b79006c0065000005049078ac1e0101e000000144145263e000000100000003ac1414bb000000009407755162419294040100890b4e640101020a010102440cbc4000000100ffa8ce1fc51330ac1414bbac141410ac1414bb0a01010200005d002000"/120]}) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000300)="7584e52b0b667c0f8a3b028fbec26e6da44b7e038722b21e64c3b1f14faf200c84cb816c19cdf8074c7ca6e60f064bef8bbe54c51f14ec2db8afbad08c208d72e0add77ea0a070d0997ccd11663dc537698af6711d7d21006147774da822be150b61f77e0b6fa496728a1b06dac28aff56820b7c7b446b7444fe17d3a0dfccc6ef2cc8d687f7c15548dc9791590088ec73b9131704f52c", &(0x7f00000003c0)=@udp6, 0x2}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) (async) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000540)={0x1f, @none, 0x20}, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r6) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x2, 0x9, {{0x28, 0x4, 0x1, 0x5, 0xa0, 0x8067, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x20, 0x3, 0x3, [{@local, 0x7fffffff}, {@multicast2, 0x1a6}, {@local, 0x6}, {@multicast2, 0xffffffff}, {@broadcast, 0xfffffffa}, {@multicast1}]}, @ra={0x94, 0x4, 0x1001}, @rr={0x7, 0x3, 0xce}, @timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast2, 0x1}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x40, 0x0, 0x0, [0x2, 0x1e72, 0x9, 0x0, 0x200, 0xffff3542]}, @timestamp_addr={0x44, 0x1c, 0x26, 0x1, 0x2, [{@multicast2, 0x4}, {@multicast2, 0x5}, {@broadcast, 0x4}]}]}}}}}) mq_timedsend(r2, &(0x7f0000000580)="43e60946270ec9e41a30ba3f645d15d4", 0x10, 0x9, &(0x7f00000005c0)={0x0, 0x989680}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="73797a746e6cf5db00000000000400007f0a2bb1db6ee040119c7856f1f9ea532a69e367b8374bed20ba77a79f7f61d4eca3246c3039050000e5bf434a59f9847b7ad6d346e94ab14715f7dbaa8ae46243d8704bb12ad69fd3457f60fcf195d95a1d2d606c17377a6f7cda9ec70bd3c77259de7094e4623f804d609ed771463f27a51ad224db63635915f73311abb2caf988a6a12c6052bbeb7a8707148e51181ed7ba69d6ebbda319611cddb8", @ANYRES32=r8, @ANYBLOB="8000001000000000000000094c0c00b000640000400490787f000001ac141432442c2da1ac1414aa000000057f000001000000006401010000010001e00000010000000100000000000000084424af63e0000001000004000a01010000000003e0000002000003fee0000001000000040144209d8000000101000000040000918e000000030000800100000800000000ff440c7b500000006100000005831f3664010100e0000002ac1e0101ffffffffac1e01017f000001e0000001"]}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000180", @ANYRES16=r7, @ANYBLOB="00042bbd7000fddbdf2505000000060001000500000008000b0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xfffffffffffffe1e) 06:11:01 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x4) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "bf42221c42aeaffd458d34bd99290ceeeeb5a0e4d6d6e7ed76eb1c4fae99bee47efd89f814c45f932d07dac75cfe4e0fdfc7e3579a071608486002c016dce86944a554479d373c5a89ef105843be7bc8ba3f70fc2d5fc60e1a28b32712732e2968b75a1e414358b417497f132685fae3a3"}, 0x75) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x67}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0xc2, &(0x7f0000000140)=""/194, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x2, 0x802, 0xbf}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) mq_open(&(0x7f0000000380)='\x00', 0x40, 0x10, &(0x7f00000003c0)={0x6, 0x55f, 0x7ff, 0x9}) (rerun: 64) 06:11:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x200) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x200) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) (async) 06:11:01 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x120, 0x120, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0xfc000000}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x8, [0x2e, 0x6, 0x1a, 0x1c, 0x2f, 0xa, 0xf, 0x29, 0xc, 0x36, 0x29, 0x24, 0x14, 0x6, 0x3, 0x36], 0x0, 0x3c, 0x8001}}}, {{@ip={@loopback, @broadcast, 0x0, 0xff, 'ip6gretap0\x00', '\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x6c}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "4fb6"}}, @common=@ttl={{0x28}, {0x3, 0x2f}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xc, 0x5, 0x230aef47, 0xba15, 0x6c, 0x0, 0x1a22, 0xb7]}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x0, 0x3, 0x4], 0x4, 0x1}, {0x0, [0x3, 0x2, 0x2, 0x0, 0x2, 0x7], 0x5, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd2d, 0x25dfdbff, {0x2, 0x14, 0x20, 0x81, 0x3f, 0x0, 0x0, 0x3, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) 06:11:01 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10a01, 0x0) clock_gettime(0x0, &(0x7f0000000100)) mq_timedreceive(r0, &(0x7f0000000040)=""/75, 0x4b, 0x5, &(0x7f00000000c0)={0x0, 0x989680}) [ 132.001258] x_tables: ip_tables: osf match: only valid for protocol 6 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10a01, 0x0) clock_gettime(0x0, &(0x7f0000000100)) (async) mq_timedreceive(r0, &(0x7f0000000040)=""/75, 0x4b, 0x5, &(0x7f00000000c0)={0x0, 0x989680}) 06:11:01 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/139, 0x8b, 0x0, &(0x7f00000000c0)=""/34, 0x22}, &(0x7f0000000140)=0x40) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x20100, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 06:11:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffff80000001}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x51}, 0x800) 06:11:01 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1, r2}) 06:11:01 executing program 4: prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0376f5cf425f24a5579c932683bd23a4e9c687653d2955a2b4e898610080f498d252760155d45941954ec435223806646110f72366a4f7111018e3eedef592f19cc091fb8d6507eef8fa5b73c8fb80700405cfa4b16e714a1e3df36923ba4e2c181fb1"], 0x4) [ 132.106549] x_tables: ip_tables: osf match: only valid for protocol 6 06:11:01 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10a01, 0x0) clock_gettime(0x0, &(0x7f0000000100)) (async) mq_timedreceive(r0, &(0x7f0000000040)=""/75, 0x4b, 0x5, &(0x7f00000000c0)={0x0, 0x989680}) 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffff80000001}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x51}, 0x800) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffff80000001}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x51}, 0x800) (async) 06:11:01 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/139, 0x8b, 0x0, &(0x7f00000000c0)=""/34, 0x22}, &(0x7f0000000140)=0x40) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x20100, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async, rerun: 32) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (rerun: 32) 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x15}) 06:11:01 executing program 4: prctl$PR_SET_TIMERSLACK(0x1d, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0376f5cf425f24a5579c932683bd23a4e9c687653d2955a2b4e898610080f498d252760155d45941954ec435223806646110f72366a4f7111018e3eedef592f19cc091fb8d6507eef8fa5b73c8fb80700405cfa4b16e714a1e3df36923ba4e2c181fb1"], 0x4) 06:11:01 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1, r2}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) socket$phonet(0x23, 0x2, 0x1) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1, r2}) (async) [ 132.223916] Bluetooth: hci2 SCO packet for unknown connection handle 62838 06:11:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffff80000001}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x51}, 0x800) 06:11:01 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x15}) 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/139, 0x8b, 0x0, &(0x7f00000000c0)=""/34, 0x22}, &(0x7f0000000140)=0x40) (async) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x20100, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x15}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x15}) (async) 06:11:01 executing program 4: prctl$PR_SET_TIMERSLACK(0x1d, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0376f5cf425f24a5579c932683bd23a4e9c687653d2955a2b4e898610080f498d252760155d45941954ec435223806646110f72366a4f7111018e3eedef592f19cc091fb8d6507eef8fa5b73c8fb80700405cfa4b16e714a1e3df36923ba4e2c181fb1"], 0x4) 06:11:01 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1, r2}) [ 132.306925] Bluetooth: hci2 SCO packet for unknown connection handle 62838 06:11:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x40850) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=r0], 0x3) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000040)="5c33208843640d5f73527dd1daad3aec7ca4fcef6f8034521eb87a0c7ee1d917", &(0x7f0000000080)=@udp6, 0x4}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x1f, 0xc8}}}, 0x6) 06:11:01 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x206882, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cdaf868ccc993f9a6c292d32b1fb27a2d74818cf310d504b3aab9d8e9c793771470bfe9641"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="3b058b14804c5438c076ea842e0c97cdbc89c1fe2ef019948ef46ca253484d619e6a52b87411d2402935a4048cf2208526cf04a438b9e98071b196cd976dc4c01ecd5241b775de5175102f7c647da3f433b4e3de1a8b4f2eab66224771627060aa824ebde8a9dddee63ec1ae08626d70000611ad271561ee77fd140754738bdd3f3c38a1bef2d794fbe62d9c5f8797b038b8bfeca4da30031660a02a9954", @ANYRES32, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x4) 06:11:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x149083, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 06:11:01 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x10}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/150, 0x96, 0xfffffffffffffff7, &(0x7f00000000c0)={0x77359400}) [ 132.399532] Bluetooth: hci2 SCO packet for unknown connection handle 62838 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x40850) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=r0], 0x3) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000040)="5c33208843640d5f73527dd1daad3aec7ca4fcef6f8034521eb87a0c7ee1d917", &(0x7f0000000080)=@udp6, 0x4}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x1f, 0xc8}}}, 0x6) 06:11:01 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x206882, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 06:11:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="3b058b14804c5438c076ea842e0c97cdbc89c1fe2ef019948ef46ca253484d619e6a52b87411d2402935a4048cf2208526cf04a438b9e98071b196cd976dc4c01ecd5241b775de5175102f7c647da3f433b4e3de1a8b4f2eab66224771627060aa824ebde8a9dddee63ec1ae08626d70000611ad271561ee77fd140754738bdd3f3c38a1bef2d794fbe62d9c5f8797b038b8bfeca4da30031660a02a9954", @ANYRES32, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x4) 06:11:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x149083, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 132.459060] Bluetooth: hci1 SCO packet for unknown connection handle 0 06:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:01 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x10}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/150, 0x96, 0xfffffffffffffff7, &(0x7f00000000c0)={0x77359400}) 06:11:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x40850) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=r0], 0x3) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000040)="5c33208843640d5f73527dd1daad3aec7ca4fcef6f8034521eb87a0c7ee1d917", &(0x7f0000000080)=@udp6, 0x4}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x1f, 0xc8}}}, 0x6) 06:11:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="3b058b14804c5438c076ea842e0c97cdbc89c1fe2ef019948ef46ca253484d619e6a52b87411d2402935a4048cf2208526cf04a438b9e98071b196cd976dc4c01ecd5241b775de5175102f7c647da3f433b4e3de1a8b4f2eab66224771627060aa824ebde8a9dddee63ec1ae08626d70000611ad271561ee77fd140754738bdd3f3c38a1bef2d794fbe62d9c5f8797b038b8bfeca4da30031660a02a9954", @ANYRES32, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x4) (rerun: 64) 06:11:02 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x206882, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 06:11:02 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x149083, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 132.537748] Bluetooth: hci1 SCO packet for unknown connection handle 0 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x10}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/150, 0x96, 0xfffffffffffffff7, &(0x7f00000000c0)={0x77359400}) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x10}) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/150, 0x96, 0xfffffffffffffff7, &(0x7f00000000c0)={0x77359400}) (async) 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x25, 0x4, @thr={&(0x7f0000000040)="4f80eec0db39d119d0101b5777f3c46b231beda3e652d941855d90a22674f8e75b4838f6fbe428dd585d76cab775b8e7a26103236dd206bad5bc38ca15bea62551be2aacb5001fa6b609e63a321cd28a350c01909fdc0a9311529aa0b91889b71da639961e48fdf279ce9c1ffa12d637582252f53d71c3", &(0x7f00000000c0)="a600b50225419674a12c02ccd7213232d0af84d2b65aca3e8be00ad13e8f076fed19e62f77ed20ffac06489b52492653c16548a6c5e8175ff6dbec5c4a588357a69b2de358aac5812d9f29798a5300af14b88fc7c2a74f0d343b3545a50de3ab4e98e22c20304a13b0bb31fde7f1afb1af7f7e37c69bc1e37626f73345d41e69a73cb3134a395649499a4330a04a1c03fe1074ee96b5c171b7afa99249f72284143820b2409bc07aadb64d5fbce47ad114b73e446e117202909b10eb8937321ccb7057922049cc52ece6fbd0c8f626add947f4c88843552ebcb7d9d855259452d36b5d85c382e04a"}}) syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c10575faa7cc0394167c987f984e7ea4fefa849cd"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x100, 0x100, 0x4, 0x1009, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x81, 0x9, {{0x14, 0x4, 0x2, 0x22, 0x50, 0x66, 0x0, 0x2, 0x29, 0x0, @loopback, @private=0xa010102, {[@ssrr={0x89, 0x7, 0x78, [@dev={0xac, 0x14, 0x14, 0x2e}]}, @lsrr={0x83, 0x1f, 0x12, [@multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100, @rand_addr=0x64010102, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0xae, 0x0, 0xf, [0xffff, 0x4, 0x4895, 0x1]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000680), 0xfffffffffffffffb, 0x501002) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2b46}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4084084) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2a0140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x4, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0xd, 0x8, 0xa, 0x2, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x3f, 0x82, &(0x7f0000000180)=""/130, 0x41100, 0x2, '\x00', r1, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x7, 0x9}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r3, r4, r0, r6, r0, r0]}, 0x80) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="6fe0149d9739512d45aa03"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 06:11:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="1036f83796e9eafcbe1e5db720cb50f4c78798bc0d1d6a86ee624b5a603b789e51ebcd3a17064b54f665b93767dd242554bdbdcf22852c74e18867410db349f8deb4dac3ff226e346f030aaf4e5fb541956b76c0076087cfe293b85739", @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="9e5bb6382bd104765d64ee074de244ffc614dfb5bc77361c19aa9a60ef22c92fa378657155bcb7731898bf247f18478c878df021639b9cbb8c"], 0x4) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x3ff, 0x1, 0x4}, &(0x7f0000000040)) [ 132.611986] Bluetooth: hci1 SCO packet for unknown connection handle 0 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x1, 0x10, 0x3, 0x1000, {{0x27, 0x4, 0x2, 0xc, 0x9c, 0x67, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @lsrr={0x83, 0x7, 0x28, [@broadcast]}, @noop, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x3, 0x11, "223757f7d7536c50fb05f5d2727494"}, {0x1, 0xe, "4f45d6049c0a0e3f6ad51552"}, {0x7, 0xb, "9ef6c413fecae64789"}, {0x7, 0x11, "5be10375098f39da4002a0f37ba37f"}]}, @timestamp_addr={0x44, 0x34, 0xb5, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x1000}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffffb}, {@private=0xa010102, 0x101}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x0, [0x1000]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x29, 0x6, 0x40, 0x4, 0x2, @empty, @mcast2, 0x1, 0x7, 0xd0c, 0x7ff}}) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x26f, 0x5, 0xffffffffffffffff}, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x25, 0x4, @thr={&(0x7f0000000040)="4f80eec0db39d119d0101b5777f3c46b231beda3e652d941855d90a22674f8e75b4838f6fbe428dd585d76cab775b8e7a26103236dd206bad5bc38ca15bea62551be2aacb5001fa6b609e63a321cd28a350c01909fdc0a9311529aa0b91889b71da639961e48fdf279ce9c1ffa12d637582252f53d71c3", &(0x7f00000000c0)="a600b50225419674a12c02ccd7213232d0af84d2b65aca3e8be00ad13e8f076fed19e62f77ed20ffac06489b52492653c16548a6c5e8175ff6dbec5c4a588357a69b2de358aac5812d9f29798a5300af14b88fc7c2a74f0d343b3545a50de3ab4e98e22c20304a13b0bb31fde7f1afb1af7f7e37c69bc1e37626f73345d41e69a73cb3134a395649499a4330a04a1c03fe1074ee96b5c171b7afa99249f72284143820b2409bc07aadb64d5fbce47ad114b73e446e117202909b10eb8937321ccb7057922049cc52ece6fbd0c8f626add947f4c88843552ebcb7d9d855259452d36b5d85c382e04a"}}) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x0) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64) 06:11:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="1036f83796e9eafcbe1e5db720cb50f4c78798bc0d1d6a86ee624b5a603b789e51ebcd3a17064b54f665b93767dd242554bdbdcf22852c74e18867410db349f8deb4dac3ff226e346f030aaf4e5fb541956b76c0076087cfe293b85739", @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="9e5bb6382bd104765d64ee074de244ffc614dfb5bc77361c19aa9a60ef22c92fa378657155bcb7731898bf247f18478c878df021639b9cbb8c"], 0x4) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x3ff, 0x1, 0x4}, &(0x7f0000000040)) 06:11:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x100, 0x100, 0x4, 0x1009, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x81, 0x9, {{0x14, 0x4, 0x2, 0x22, 0x50, 0x66, 0x0, 0x2, 0x29, 0x0, @loopback, @private=0xa010102, {[@ssrr={0x89, 0x7, 0x78, [@dev={0xac, 0x14, 0x14, 0x2e}]}, @lsrr={0x83, 0x1f, 0x12, [@multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100, @rand_addr=0x64010102, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0xae, 0x0, 0xf, [0xffff, 0x4, 0x4895, 0x1]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000680), 0xfffffffffffffffb, 0x501002) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2b46}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4084084) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2a0140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x4, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0xd, 0x8, 0xa, 0x2, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x3f, 0x82, &(0x7f0000000180)=""/130, 0x41100, 0x2, '\x00', r1, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x7, 0x9}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r3, r4, r0, r6, r0, r0]}, 0x80) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="6fe0149d9739512d45aa03"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x100, 0x100, 0x4, 0x1009, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x81, 0x9, {{0x14, 0x4, 0x2, 0x22, 0x50, 0x66, 0x0, 0x2, 0x29, 0x0, @loopback, @private=0xa010102, {[@ssrr={0x89, 0x7, 0x78, [@dev={0xac, 0x14, 0x14, 0x2e}]}, @lsrr={0x83, 0x1f, 0x12, [@multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100, @rand_addr=0x64010102, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0xae, 0x0, 0xf, [0xffff, 0x4, 0x4895, 0x1]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) syz_open_dev$vcsn(&(0x7f0000000680), 0xfffffffffffffffb, 0x501002) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2b46}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4084084) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2a0140, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x4, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0xd, 0x8, 0xa, 0x2, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x3f, 0x82, &(0x7f0000000180)=""/130, 0x41100, 0x2, '\x00', r1, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x7, 0x9}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r3, r4, r0, r6, r0, r0]}, 0x80) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="6fe0149d9739512d45aa03"], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) (async) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x26f, 0x5, 0xffffffffffffffff}, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x1, 0x10, 0x3, 0x1000, {{0x27, 0x4, 0x2, 0xc, 0x9c, 0x67, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @lsrr={0x83, 0x7, 0x28, [@broadcast]}, @noop, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x3, 0x11, "223757f7d7536c50fb05f5d2727494"}, {0x1, 0xe, "4f45d6049c0a0e3f6ad51552"}, {0x7, 0xb, "9ef6c413fecae64789"}, {0x7, 0x11, "5be10375098f39da4002a0f37ba37f"}]}, @timestamp_addr={0x44, 0x34, 0xb5, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x1000}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffffb}, {@private=0xa010102, 0x101}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x0, [0x1000]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x29, 0x6, 0x40, 0x4, 0x2, @empty, @mcast2, 0x1, 0x7, 0xd0c, 0x7ff}}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x1, 0x10, 0x3, 0x1000, {{0x27, 0x4, 0x2, 0xc, 0x9c, 0x67, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @lsrr={0x83, 0x7, 0x28, [@broadcast]}, @noop, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x3, 0x11, "223757f7d7536c50fb05f5d2727494"}, {0x1, 0xe, "4f45d6049c0a0e3f6ad51552"}, {0x7, 0xb, "9ef6c413fecae64789"}, {0x7, 0x11, "5be10375098f39da4002a0f37ba37f"}]}, @timestamp_addr={0x44, 0x34, 0xb5, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x1000}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffffb}, {@private=0xa010102, 0x101}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x0, [0x1000]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x29, 0x6, 0x40, 0x4, 0x2, @empty, @mcast2, 0x1, 0x7, 0xd0c, 0x7ff}}) (async) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x25, 0x4, @thr={&(0x7f0000000040)="4f80eec0db39d119d0101b5777f3c46b231beda3e652d941855d90a22674f8e75b4838f6fbe428dd585d76cab775b8e7a26103236dd206bad5bc38ca15bea62551be2aacb5001fa6b609e63a321cd28a350c01909fdc0a9311529aa0b91889b71da639961e48fdf279ce9c1ffa12d637582252f53d71c3", &(0x7f00000000c0)="a600b50225419674a12c02ccd7213232d0af84d2b65aca3e8be00ad13e8f076fed19e62f77ed20ffac06489b52492653c16548a6c5e8175ff6dbec5c4a588357a69b2de358aac5812d9f29798a5300af14b88fc7c2a74f0d343b3545a50de3ab4e98e22c20304a13b0bb31fde7f1afb1af7f7e37c69bc1e37626f73345d41e69a73cb3134a395649499a4330a04a1c03fe1074ee96b5c171b7afa99249f72284143820b2409bc07aadb64d5fbce47ad114b73e446e117202909b10eb8937321ccb7057922049cc52ece6fbd0c8f626add947f4c88843552ebcb7d9d855259452d36b5d85c382e04a"}}) syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x25, 0x4, @thr={&(0x7f0000000040)="4f80eec0db39d119d0101b5777f3c46b231beda3e652d941855d90a22674f8e75b4838f6fbe428dd585d76cab775b8e7a26103236dd206bad5bc38ca15bea62551be2aacb5001fa6b609e63a321cd28a350c01909fdc0a9311529aa0b91889b71da639961e48fdf279ce9c1ffa12d637582252f53d71c3", &(0x7f00000000c0)="a600b50225419674a12c02ccd7213232d0af84d2b65aca3e8be00ad13e8f076fed19e62f77ed20ffac06489b52492653c16548a6c5e8175ff6dbec5c4a588357a69b2de358aac5812d9f29798a5300af14b88fc7c2a74f0d343b3545a50de3ab4e98e22c20304a13b0bb31fde7f1afb1af7f7e37c69bc1e37626f73345d41e69a73cb3134a395649499a4330a04a1c03fe1074ee96b5c171b7afa99249f72284143820b2409bc07aadb64d5fbce47ad114b73e446e117202909b10eb8937321ccb7057922049cc52ece6fbd0c8f626add947f4c88843552ebcb7d9d855259452d36b5d85c382e04a"}}) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x0) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64) (async) 06:11:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="1036f83796e9eafcbe1e5db720cb50f4c78798bc0d1d6a86ee624b5a603b789e51ebcd3a17064b54f665b93767dd242554bdbdcf22852c74e18867410db349f8deb4dac3ff226e346f030aaf4e5fb541956b76c0076087cfe293b85739", @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="9e5bb6382bd104765d64ee074de244ffc614dfb5bc77361c19aa9a60ef22c92fa378657155bcb7731898bf247f18478c878df021639b9cbb8c"], 0x4) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x3ff, 0x1, 0x4}, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="1036f83796e9eafcbe1e5db720cb50f4c78798bc0d1d6a86ee624b5a603b789e51ebcd3a17064b54f665b93767dd242554bdbdcf22852c74e18867410db349f8deb4dac3ff226e346f030aaf4e5fb541956b76c0076087cfe293b85739", @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="9e5bb6382bd104765d64ee074de244ffc614dfb5bc77361c19aa9a60ef22c92fa378657155bcb7731898bf247f18478c878df021639b9cbb8c"], 0x4) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x3ff, 0x1, 0x4}, &(0x7f0000000040)) (async) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x26f, 0x5, 0xffffffffffffffff}, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x26f, 0x5, 0xffffffffffffffff}, &(0x7f0000000040)) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) (async) 06:11:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x100, 0x100, 0x4, 0x1009, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x81, 0x9, {{0x14, 0x4, 0x2, 0x22, 0x50, 0x66, 0x0, 0x2, 0x29, 0x0, @loopback, @private=0xa010102, {[@ssrr={0x89, 0x7, 0x78, [@dev={0xac, 0x14, 0x14, 0x2e}]}, @lsrr={0x83, 0x1f, 0x12, [@multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100, @rand_addr=0x64010102, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0xae, 0x0, 0xf, [0xffff, 0x4, 0x4895, 0x1]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000680), 0xfffffffffffffffb, 0x501002) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2b46}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4084084) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2a0140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x4, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0xd, 0x8, 0xa, 0x2, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x3f, 0x82, &(0x7f0000000180)=""/130, 0x41100, 0x2, '\x00', r1, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x7, 0x9}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r3, r4, r0, r6, r0, r0]}, 0x80) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="6fe0149d9739512d45aa03"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x1, 0x10, 0x3, 0x1000, {{0x27, 0x4, 0x2, 0xc, 0x9c, 0x67, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @lsrr={0x83, 0x7, 0x28, [@broadcast]}, @noop, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x3, 0x11, "223757f7d7536c50fb05f5d2727494"}, {0x1, 0xe, "4f45d6049c0a0e3f6ad51552"}, {0x7, 0xb, "9ef6c413fecae64789"}, {0x7, 0x11, "5be10375098f39da4002a0f37ba37f"}]}, @timestamp_addr={0x44, 0x34, 0xb5, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x1000}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffffb}, {@private=0xa010102, 0x101}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x0, [0x1000]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x29, 0x6, 0x40, 0x4, 0x2, @empty, @mcast2, 0x1, 0x7, 0xd0c, 0x7ff}}) 06:11:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x586}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2da}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x4) 06:11:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x586}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2da}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93dac346cb61741c1057"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x4) 06:11:02 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="df9c11ef215ff57563a037a6c360f53552595ad2e3611428c83a89e9a24c3fcb66693c1ec9cf6237051d3a4d1c7616ed9afba06e38d7e939025a101c8a4fa0643aff879355f390d5ac48e98aa9d23f4690d16bc3a8fa439466d1d172ee0d91cb1b59125708c0505f92804a4cf1f99ace9f39a6f91e18e2718b55a786daa9bb5d1eed5afa1680db79c5d2b93d231abaae10f9fc20671d6cfe501165924846ee7f05432c8209bd04194f9b19db", &(0x7f00000000c0)=@udp6}, 0x20) 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x8}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0x1, [0x2, 0x1]}, {0x80000000, 0x0, 0x0, [0x561, 0x8]}, 0x10000000, [0x330dc818, 0x5]}) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000008}) [ 132.875249] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x4) (async) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x586}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2da}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x8}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async, rerun: 32) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0x1, [0x2, 0x1]}, {0x80000000, 0x0, 0x0, [0x561, 0x8]}, 0x10000000, [0x330dc818, 0x5]}) [ 132.931851] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:02 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="df9c11ef215ff57563a037a6c360f53552595ad2e3611428c83a89e9a24c3fcb66693c1ec9cf6237051d3a4d1c7616ed9afba06e38d7e939025a101c8a4fa0643aff879355f390d5ac48e98aa9d23f4690d16bc3a8fa439466d1d172ee0d91cb1b59125708c0505f92804a4cf1f99ace9f39a6f91e18e2718b55a786daa9bb5d1eed5afa1680db79c5d2b93d231abaae10f9fc20671d6cfe501165924846ee7f05432c8209bd04194f9b19db", &(0x7f00000000c0)=@udp6}, 0x20) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000008}) 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc8, 0x7f}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x8}) (async, rerun: 64) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 64) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0x1, [0x2, 0x1]}, {0x80000000, 0x0, 0x0, [0x561, 0x8]}, 0x10000000, [0x330dc818, 0x5]}) [ 132.999890] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 133.013365] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:02 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="df9c11ef215ff57563a037a6c360f53552595ad2e3611428c83a89e9a24c3fcb66693c1ec9cf6237051d3a4d1c7616ed9afba06e38d7e939025a101c8a4fa0643aff879355f390d5ac48e98aa9d23f4690d16bc3a8fa439466d1d172ee0d91cb1b59125708c0505f92804a4cf1f99ace9f39a6f91e18e2718b55a786daa9bb5d1eed5afa1680db79c5d2b93d231abaae10f9fc20671d6cfe501165924846ee7f05432c8209bd04194f9b19db", &(0x7f00000000c0)=@udp6}, 0x20) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000008}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000008}) (async) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) 06:11:02 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc8, 0x7f}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187a64c5a93"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 133.092488] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000140), 0x0, 0x3ff, &(0x7f0000000180)={0x0, 0x3938700}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) mq_timedreceive(r3, &(0x7f0000000000)=""/198, 0xc6, 0xfffffffffffffffe, 0x0) 06:11:02 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:02 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc8, 0x7f}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc8, 0x7f}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) [ 133.176028] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async, rerun: 64) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async, rerun: 32) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000140), 0x0, 0x3ff, &(0x7f0000000180)={0x0, 0x3938700}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) mq_timedreceive(r3, &(0x7f0000000000)=""/198, 0xc6, 0xfffffffffffffffe, 0x0) 06:11:02 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) 06:11:02 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="e781f46c8f6ee2d8211900"], 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x81, 0x204440) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 133.270113] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async, rerun: 64) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000140), 0x0, 0x3ff, &(0x7f0000000180)={0x0, 0x3938700}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) mq_timedreceive(r3, &(0x7f0000000000)=""/198, 0xc6, 0xfffffffffffffffe, 0x0) 06:11:02 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="c8ef718129fc93366200396916540a403964e8a556d02fd3e172bc84a7c348fffb7a25403d4a061214dab4e1e68dbb6936445efd8f38bc8b1285d30f420eec5bc9d7d639e4220b69c6a2d0a4af62c6617ca018c999412eebf63ced7c0ba936c070848644c4093341b05f49def9ee32cb377dfa793b0a6fcda545bc9d1fd06fbbf6c79e41d67f1161d0ae5746d655c0a3b978d19455854bff3f1b101ad5607293d5a55a910c5e41ca143c1e4aadb488b52bc0f16ecc27c4c8fd3a3757c949fda3"], 0x4) 06:11:02 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="e781f46c8f6ee2d8211900"], 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x81, 0x204440) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000040)={0x3, {0x7f, 0xffff, 0x0, 0xfffffff7}}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2100c0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0xffffffffffff10b5, 0x3, 0x7}, 0x0) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x401}) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="e781f46c8f6ee2d8211900"], 0x4) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x81, 0x204440) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x8}, 0x4) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x420680, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) accept4$phonet_pipe(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80020002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x5) 06:11:02 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="c8ef718129fc93366200396916540a403964e8a556d02fd3e172bc84a7c348fffb7a25403d4a061214dab4e1e68dbb6936445efd8f38bc8b1285d30f420eec5bc9d7d639e4220b69c6a2d0a4af62c6617ca018c999412eebf63ced7c0ba936c070848644c4093341b05f49def9ee32cb377dfa793b0a6fcda545bc9d1fd06fbbf6c79e41d67f1161d0ae5746d655c0a3b978d19455854bff3f1b101ad5607293d5a55a910c5e41ca143c1e4aadb488b52bc0f16ecc27c4c8fd3a3757c949fda3"], 0x4) 06:11:02 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0xc10, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7b}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8811}, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) 06:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:02 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x401}) 06:11:02 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="c8ef718129fc93366200396916540a403964e8a556d02fd3e172bc84a7c348fffb7a25403d4a061214dab4e1e68dbb6936445efd8f38bc8b1285d30f420eec5bc9d7d639e4220b69c6a2d0a4af62c6617ca018c999412eebf63ced7c0ba936c070848644c4093341b05f49def9ee32cb377dfa793b0a6fcda545bc9d1fd06fbbf6c79e41d67f1161d0ae5746d655c0a3b978d19455854bff3f1b101ad5607293d5a55a910c5e41ca143c1e4aadb488b52bc0f16ecc27c4c8fd3a3757c949fda3"], 0x4) 06:11:02 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) (rerun: 64) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000040)={0x3, {0x7f, 0xffff, 0x0, 0xfffffff7}}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2100c0, 0x0) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0xffffffffffff10b5, 0x3, 0x7}, 0x0) 06:11:02 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x8}, 0x4) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x420680, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) accept4$phonet_pipe(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80020002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x5) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:03 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0xc10, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7b}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8811}, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0xc10, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7b}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8811}, 0x8000) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) 06:11:03 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x8}, 0x4) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x420680, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) (async) accept4$phonet_pipe(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80020002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x5) [ 133.521456] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:03 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) (async, rerun: 32) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000040)={0x3, {0x7f, 0xffff, 0x0, 0xfffffff7}}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2100c0, 0x0) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0xffffffffffff10b5, 0x3, 0x7}, 0x0) 06:11:03 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x401}) 06:11:03 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="fdfe00009aafb60800000000000000fdea7c8676e40c14f377324d3d8252b51207ff035d1605d789c832d8597208856f5a7821bcd06062637bd74e5b1e387999ea18c6a0160281ec4b6a22e011f9f12194fe8d6918c7dee6dc69affa0f425c874e8d174345511691511ef93eb80874608999d49b1f9ea003aed39aa7f116ae5b846fe00dd1d26a819e25f67292b07b1cf446293c887a6a1a2bc33c40b2fc19fa77524efe0d3b9956fe1b4985006a8515000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf25030000000000080000000000000000000000000000000000080009000300000008000900070000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x20008014) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r1, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x4, 0x9, 0x9, r2, 0x200, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x2}, 0x48) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x40}}, 0x800) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:03 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="fdfe00009aafb60800000000000000fdea7c8676e40c14f377324d3d8252b51207ff035d1605d789c832d8597208856f5a7821bcd06062637bd74e5b1e387999ea18c6a0160281ec4b6a22e011f9f12194fe8d6918c7dee6dc69affa0f425c874e8d174345511691511ef93eb80874608999d49b1f9ea003aed39aa7f116ae5b846fe00dd1d26a819e25f67292b07b1cf446293c887a6a1a2bc33c40b2fc19fa77524efe0d3b9956fe1b4985006a8515000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf25030000000000080000000000000000000000000000000000080009000300000008000900070000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x20008014) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r1, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async, rerun: 64) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x4, 0x9, 0x9, r2, 0x200, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x2}, 0x48) (async, rerun: 32) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x40}}, 0x800) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:03 executing program 5: socketpair(0x26, 0x4, 0x3, &(0x7f0000000000)) 06:11:03 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000380)) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000240)="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", &(0x7f00000001c0)="dc56d63065a7e6560f24ef9f45cdcfacfe3130b7de911d2850b2faa03b5776f012847222bf308fbf3d3fdbe3f942f12b4c179f6d9476c3013ec7e17a0dbd9e364416c7a2247a"}}) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0xce, 0x0, 0x8, 0x22, @private2={0xfc, 0x2, '\x00', 0x8}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x1, 0x3}}) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000100)={0x0, 0x2, 0x8, 0x8b, 0x2, 0x1, 0x12, 0x7, 0xbb, 0x9e, 0x1, "4ebceebfb3b69f170d8be6d94574a0fc0c8f2b07724741758fb59e9ffe92a62c"}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000bc0)={0x0, 0x0}) r4 = getpgrp(0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000c40)={r0, r5, 0x2}) 06:11:03 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3, 0x401) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000140)=""/75, 0x4b, 0x2, &(0x7f0000000200)={r1, r2+10000000}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) mq_timedsend(r3, &(0x7f0000000000)="107e5d7f500b65e3c597081986efedb917a07a9730e0441b7d771961a094f08e626496a6393ad1f2b438124bbe68d8bb494ce98f530e8692efaee9b6d5e8de2dd60fe117efd142302fb8d88c4ca6974c89a538478d8e502bc8277ce6c166ad5a4380f7dd29905ed8a6f43c5fb1ac7af68c859f44e01d6a14cfd77378d061e3e17bee39c37d543cc67c37372b9d9c6c639476748e9858f4714c08810e0b46cfb7dfc412feecc7e59fa8ff8d4f7f8bc96c62ed5a04d5e8a674cda4378761769f0ddf4d644dbb0ecd13b720e5b4c5b0ca33b9e19fbb8d01b0364314bd3f3b8c7ad7224c4dc77be9def98a9f3c80fcedf0", 0xef, 0x1, 0x0) [ 133.645514] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 133.661035] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:03 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0xc10, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7b}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8811}, 0x8000) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) 06:11:03 executing program 5: socketpair(0x26, 0x4, 0x3, &(0x7f0000000000)) socketpair(0x26, 0x4, 0x3, &(0x7f0000000000)) (async) 06:11:03 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0xb3}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) 06:11:03 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3, 0x401) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000140)=""/75, 0x4b, 0x2, &(0x7f0000000200)={r1, r2+10000000}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) mq_timedsend(r3, &(0x7f0000000000)="107e5d7f500b65e3c597081986efedb917a07a9730e0441b7d771961a094f08e626496a6393ad1f2b438124bbe68d8bb494ce98f530e8692efaee9b6d5e8de2dd60fe117efd142302fb8d88c4ca6974c89a538478d8e502bc8277ce6c166ad5a4380f7dd29905ed8a6f43c5fb1ac7af68c859f44e01d6a14cfd77378d061e3e17bee39c37d543cc67c37372b9d9c6c639476748e9858f4714c08810e0b46cfb7dfc412feecc7e59fa8ff8d4f7f8bc96c62ed5a04d5e8a674cda4378761769f0ddf4d644dbb0ecd13b720e5b4c5b0ca33b9e19fbb8d01b0364314bd3f3b8c7ad7224c4dc77be9def98a9f3c80fcedf0", 0xef, 0x1, 0x0) 06:11:03 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000380)) (async, rerun: 32) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000240)="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", &(0x7f00000001c0)="dc56d63065a7e6560f24ef9f45cdcfacfe3130b7de911d2850b2faa03b5776f012847222bf308fbf3d3fdbe3f942f12b4c179f6d9476c3013ec7e17a0dbd9e364416c7a2247a"}}) (async, rerun: 32) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0xce, 0x0, 0x8, 0x22, @private2={0xfc, 0x2, '\x00', 0x8}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x1, 0x3}}) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000100)={0x0, 0x2, 0x8, 0x8b, 0x2, 0x1, 0x12, 0x7, 0xbb, 0x9e, 0x1, "4ebceebfb3b69f170d8be6d94574a0fc0c8f2b07724741758fb59e9ffe92a62c"}) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000bc0)={0x0, 0x0}) r4 = getpgrp(0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) (async) r5 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000c40)={r0, r5, 0x2}) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00W'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 133.739575] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:03 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0xb3}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0xb3}}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) 06:11:03 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="fdfe00009aafb60800000000000000fdea7c8676e40c14f377324d3d8252b51207ff035d1605d789c832d8597208856f5a7821bcd06062637bd74e5b1e387999ea18c6a0160281ec4b6a22e011f9f12194fe8d6918c7dee6dc69affa0f425c874e8d174345511691511ef93eb80874608999d49b1f9ea003aed39aa7f116ae5b846fe00dd1d26a819e25f67292b07b1cf446293c887a6a1a2bc33c40b2fc19fa77524efe0d3b9956fe1b4985006a8515000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf25030000000000080000000000000000000000000000000000080009000300000008000900070000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x20008014) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r1, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x4, 0x9, 0x9, r2, 0x200, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x2}, 0x48) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r4) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x40}}, 0x800) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:03 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3, 0x401) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000140)=""/75, 0x4b, 0x2, &(0x7f0000000200)={r1, r2+10000000}) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) (async) mq_timedsend(r3, &(0x7f0000000000)="107e5d7f500b65e3c597081986efedb917a07a9730e0441b7d771961a094f08e626496a6393ad1f2b438124bbe68d8bb494ce98f530e8692efaee9b6d5e8de2dd60fe117efd142302fb8d88c4ca6974c89a538478d8e502bc8277ce6c166ad5a4380f7dd29905ed8a6f43c5fb1ac7af68c859f44e01d6a14cfd77378d061e3e17bee39c37d543cc67c37372b9d9c6c639476748e9858f4714c08810e0b46cfb7dfc412feecc7e59fa8ff8d4f7f8bc96c62ed5a04d5e8a674cda4378761769f0ddf4d644dbb0ecd13b720e5b4c5b0ca33b9e19fbb8d01b0364314bd3f3b8c7ad7224c4dc77be9def98a9f3c80fcedf0", 0xef, 0x1, 0x0) [ 133.789306] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:03 executing program 5: socketpair(0x26, 0x4, 0x3, &(0x7f0000000000)) socketpair(0x26, 0x4, 0x3, &(0x7f0000000000)) (async) 06:11:03 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0xb3}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00W'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 133.841561] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 133.848455] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:03 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 06:11:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) mq_timedsend(r1, 0x0, 0x34, 0xdbbd, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2a2143, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00042bbd7000fcdbdf25030000000500220000000000080009000300000008000900040000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r5, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2, 0x2, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf2501000000050012004600000006001b004e2400000c000f004000000000000000080009000100000008001700", @ANYRES32=r7, @ANYBLOB="0800090002005414b5497a591abecdf39200000098efaa2d670185b6d621a7334ffc3777"], 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x20000000) 06:11:03 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x40010, r0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x6503) 06:11:03 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000380)) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000240)="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", &(0x7f00000001c0)="dc56d63065a7e6560f24ef9f45cdcfacfe3130b7de911d2850b2faa03b5776f012847222bf308fbf3d3fdbe3f942f12b4c179f6d9476c3013ec7e17a0dbd9e364416c7a2247a"}}) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0xce, 0x0, 0x8, 0x22, @private2={0xfc, 0x2, '\x00', 0x8}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x1, 0x3}}) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000100)={0x0, 0x2, 0x8, 0x8b, 0x2, 0x1, 0x12, 0x7, 0xbb, 0x9e, 0x1, "4ebceebfb3b69f170d8be6d94574a0fc0c8f2b07724741758fb59e9ffe92a62c"}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000bc0)={0x0, 0x0}) r4 = getpgrp(0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000c40)={r0, r5, 0x2}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000380)) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000240)="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", &(0x7f00000001c0)="dc56d63065a7e6560f24ef9f45cdcfacfe3130b7de911d2850b2faa03b5776f012847222bf308fbf3d3fdbe3f942f12b4c179f6d9476c3013ec7e17a0dbd9e364416c7a2247a"}}) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0xce, 0x0, 0x8, 0x22, @private2={0xfc, 0x2, '\x00', 0x8}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x1, 0x3}}) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000100)={0x0, 0x2, 0x8, 0x8b, 0x2, 0x1, 0x12, 0x7, 0xbb, 0x9e, 0x1, "4ebceebfb3b69f170d8be6d94574a0fc0c8f2b07724741758fb59e9ffe92a62c"}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000bc0)) (async) getpgrp(0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) (async) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000c40)={r0, r5, 0x2}) (async) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00W'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:03 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 06:11:03 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x40010, r0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x6503) 06:11:03 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 06:11:03 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000000)="e3bdbfb4836d06d50372b907a5be94b16047db938bdea02118fff5e955d939253ab92045e6881982380b0d63454d7b2663389f14934f93ff625c07fdfd3d644726b93a05369572cdd0005e576191afcc1cf560996a125f3c33482bfb8c6dfba5f2fb22d142c0fa0e79f6442126439319a397a6761430d3", &(0x7f0000000080)="dbdee0ed78d658be227949fe47ecbb731184b95f31c51f638e168a292548c9c6ba495717de9cbdc5773ea064c300618cf136f5a89f60e5ea66f9542e6a751cc60aeb4a491a7dddb5ad741b14b0292188d9b93833fd3a86b05c34388966211b2d87ee5c46f5a0376ee82ed0fa27f3ad19b18d7570e3e279262a65d2d6ec67832ccee19db77c92c4bfa7fc646eb4ac4bd9c6f8ed19cc2f84f92a6e542c7b1e31a562df2031"}}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x214040) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0x0, [0x6, 0x7ff]}, {0x80000000, 0x0, 0x5, [0x1, 0x6]}, 0x4, [0x41, 0x8]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x4, [0x4, 0x8001]}, {0x80000000, 0x0, 0x6, [0x20, 0x7]}, 0x2, [0x1, 0x1]}) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000001c0)=0x4) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00WQ'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 133.945130] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:03 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 06:11:03 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 06:11:03 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x40010, r0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x6503) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x40010, r0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x6503) (async) 06:11:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) mq_timedsend(r1, 0x0, 0x34, 0xdbbd, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2a2143, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00042bbd7000fcdbdf25030000000500220000000000080009000300000008000900040000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r5, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x2, 0x2, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf2501000000050012004600000006001b004e2400000c000f004000000000000000080009000100000008001700", @ANYRES32=r7, @ANYBLOB="0800090002005414b5497a591abecdf39200000098efaa2d670185b6d621a7334ffc3777"], 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x20000000) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00WQ'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) [ 134.011211] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="049d6c3d59bdaecba1b63f9ac90029af97fba002000000a84053ff21bedf620f755d6f644e7057dbf399b5ce40b13b6457a857a414d608d23ceb3abcc6b1afb86e1682671a55e1f032aa05000000", @ANYBLOB="fe34799cbd0dbfe7989aaf7b901175f609f02e8c1b7e414266ea2d988307fe8115000f45aee2b5b610d10cbd81b933d49023bee33f40000000619a431aab772c0de5183972f3059b0d1f0e7c372c8ce977f4435dd7a5cd7eb1bc74d4df091a3bcae70c50b736806985bb801a86caeff9deeaefafb4b92db5a7fdeaf296ff0839eff634a5a7efa09577456d4574f4721e52b44f21a026a50eea0d931ca71bf855de33bd3589e9bcb33c54713ec78107ac7de781d7732f0000000092c6be237f051d265d5dcfa8e0f8324939c5a4be1df462cbe9018d31f720dc9d8afe9e6a281a0554f3000000000000000000005883b0aa67b50cc64a796898c9dcd0d8", @ANYRESOCT=r0, @ANYRES16=r0], 0x4) 06:11:03 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000000)="e3bdbfb4836d06d50372b907a5be94b16047db938bdea02118fff5e955d939253ab92045e6881982380b0d63454d7b2663389f14934f93ff625c07fdfd3d644726b93a05369572cdd0005e576191afcc1cf560996a125f3c33482bfb8c6dfba5f2fb22d142c0fa0e79f6442126439319a397a6761430d3", &(0x7f0000000080)="dbdee0ed78d658be227949fe47ecbb731184b95f31c51f638e168a292548c9c6ba495717de9cbdc5773ea064c300618cf136f5a89f60e5ea66f9542e6a751cc60aeb4a491a7dddb5ad741b14b0292188d9b93833fd3a86b05c34388966211b2d87ee5c46f5a0376ee82ed0fa27f3ad19b18d7570e3e279262a65d2d6ec67832ccee19db77c92c4bfa7fc646eb4ac4bd9c6f8ed19cc2f84f92a6e542c7b1e31a562df2031"}}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x214040) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0x0, [0x6, 0x7ff]}, {0x80000000, 0x0, 0x5, [0x1, 0x6]}, 0x4, [0x41, 0x8]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x4, [0x4, 0x8001]}, {0x80000000, 0x0, 0x6, [0x20, 0x7]}, 0x2, [0x1, 0x1]}) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000001c0)=0x4) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000000)="e3bdbfb4836d06d50372b907a5be94b16047db938bdea02118fff5e955d939253ab92045e6881982380b0d63454d7b2663389f14934f93ff625c07fdfd3d644726b93a05369572cdd0005e576191afcc1cf560996a125f3c33482bfb8c6dfba5f2fb22d142c0fa0e79f6442126439319a397a6761430d3", &(0x7f0000000080)="dbdee0ed78d658be227949fe47ecbb731184b95f31c51f638e168a292548c9c6ba495717de9cbdc5773ea064c300618cf136f5a89f60e5ea66f9542e6a751cc60aeb4a491a7dddb5ad741b14b0292188d9b93833fd3a86b05c34388966211b2d87ee5c46f5a0376ee82ed0fa27f3ad19b18d7570e3e279262a65d2d6ec67832ccee19db77c92c4bfa7fc646eb4ac4bd9c6f8ed19cc2f84f92a6e542c7b1e31a562df2031"}}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x214040) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0x0, [0x6, 0x7ff]}, {0x80000000, 0x0, 0x5, [0x1, 0x6]}, 0x4, [0x41, 0x8]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x4, [0x4, 0x8001]}, {0x80000000, 0x0, 0x6, [0x20, 0x7]}, 0x2, [0x1, 0x1]}) (async) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000001c0)=0x4) (async) 06:11:03 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 06:11:03 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00WQ'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB="2e792d26cbe278b6e82fdf417573cf60a8771c5c43025ba447f34581a56988887ffc419802193f85853c26d9bb69f2fa6ff3c2629f0d2d1c956db1eae7d72eeaae75da204dc1c5dd8e559d98ae38edf288c6665aa325902f8c9f0c9f89ff3a89ed59459366a44664531a885f07759e188c3ac9bfa3d7e102cb774162266d0be98d4a6e6c4aec3ae1e8876d49404e210a0f70cd22c0f0914e224a67a8838609f4f1cab233ed61bd013a3e5c4ddef7fe1ebe27ee280db9b6b7e49b41137122c3f332ec562e712282bc80552696dece123cf5f2ae09c656c83c2ec955821349d67ee8531acabca8e05cf5f432cb9eee0501d50ea72433a00c9a72caa6", @ANYRES64=r0, @ANYBLOB="049d6c3d59bdaecba1b63f9ac90029af97fba002000000a84053ff21bedf620f755d6f644e7057dbf399b5ce40b13b6457a857a414d608d23ceb3abcc6b1afb86e1682671a55e1f032aa05000000", @ANYBLOB="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", @ANYRESOCT=r0, @ANYRES16=r0], 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB="2e792d26cbe278b6e82fdf417573cf60a8771c5c43025ba447f34581a56988887ffc419802193f85853c26d9bb69f2fa6ff3c2629f0d2d1c956db1eae7d72eeaae75da204dc1c5dd8e559d98ae38edf288c6665aa325902f8c9f0c9f89ff3a89ed59459366a44664531a885f07759e188c3ac9bfa3d7e102cb774162266d0be98d4a6e6c4aec3ae1e8876d49404e210a0f70cd22c0f0914e224a67a8838609f4f1cab233ed61bd013a3e5c4ddef7fe1ebe27ee280db9b6b7e49b41137122c3f332ec562e712282bc80552696dece123cf5f2ae09c656c83c2ec955821349d67ee8531acabca8e05cf5f432cb9eee0501d50ea72433a00c9a72caa6", @ANYRES64=r0, @ANYBLOB="049d6c3d59bdaecba1b63f9ac90029af97fba002000000a84053ff21bedf620f755d6f644e7057dbf399b5ce40b13b6457a857a414d608d23ceb3abcc6b1afb86e1682671a55e1f032aa05000000", @ANYBLOB="fe34799cbd0dbfe7989aaf7b901175f609f02e8c1b7e414266ea2d988307fe8115000f45aee2b5b610d10cbd81b933d49023bee33f40000000619a431aab772c0de5183972f3059b0d1f0e7c372c8ce977f4435dd7a5cd7eb1bc74d4df091a3bcae70c50b736806985bb801a86caeff9deeaefafb4b92db5a7fdeaf296ff0839eff634a5a7efa09577456d4574f4721e52b44f21a026a50eea0d931ca71bf855de33bd3589e9bcb33c54713ec78107ac7de781d7732f0000000092c6be237f051d265d5dcfa8e0f8324939c5a4be1df462cbe9018d31f720dc9d8afe9e6a281a0554f3000000000000000000005883b0aa67b50cc64a796898c9dcd0d8", @ANYRESOCT=r0, @ANYRES16=r0], 0x4) (async) [ 134.078296] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:03 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000000)="e3bdbfb4836d06d50372b907a5be94b16047db938bdea02118fff5e955d939253ab92045e6881982380b0d63454d7b2663389f14934f93ff625c07fdfd3d644726b93a05369572cdd0005e576191afcc1cf560996a125f3c33482bfb8c6dfba5f2fb22d142c0fa0e79f6442126439319a397a6761430d3", &(0x7f0000000080)="dbdee0ed78d658be227949fe47ecbb731184b95f31c51f638e168a292548c9c6ba495717de9cbdc5773ea064c300618cf136f5a89f60e5ea66f9542e6a751cc60aeb4a491a7dddb5ad741b14b0292188d9b93833fd3a86b05c34388966211b2d87ee5c46f5a0376ee82ed0fa27f3ad19b18d7570e3e279262a65d2d6ec67832ccee19db77c92c4bfa7fc646eb4ac4bd9c6f8ed19cc2f84f92a6e542c7b1e31a562df2031"}}) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x214040) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0x0, [0x6, 0x7ff]}, {0x80000000, 0x0, 0x5, [0x1, 0x6]}, 0x4, [0x41, 0x8]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x4, [0x4, 0x8001]}, {0x80000000, 0x0, 0x6, [0x20, 0x7]}, 0x2, [0x1, 0x1]}) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000001c0)=0x4) 06:11:03 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) socket$can_raw(0x1d, 0x3, 0x1) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187"], 0x2c}}, 0x4048040) 06:11:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="049d6c3d59bdaecba1b63f9ac90029af97fba002000000a84053ff21bedf620f755d6f644e7057dbf399b5ce40b13b6457a857a414d608d23ceb3abcc6b1afb86e1682671a55e1f032aa05000000", @ANYBLOB="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", @ANYRESOCT=r0, @ANYRES16=r0], 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="049d6c3d59bdaecba1b63f9ac90029af97fba002000000a84053ff21bedf620f755d6f644e7057dbf399b5ce40b13b6457a857a414d608d23ceb3abcc6b1afb86e1682671a55e1f032aa05000000", @ANYBLOB="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", @ANYRESOCT=r0, @ANYRES16=r0], 0x4) (async) 06:11:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) mq_timedsend(r1, 0x0, 0x34, 0xdbbd, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2a2143, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00042bbd7000fcdbdf25030000000500220000000000080009000300000008000900040000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r5, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2, 0x2, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf2501000000050012004600000006001b004e2400000c000f004000000000000000080009000100000008001700", @ANYRES32=r7, @ANYBLOB="0800090002005414b5497a591abecdf39200000098efaa2d670185b6d621a7334ffc3777"], 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x20000000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) mq_timedsend(r1, 0x0, 0x34, 0xdbbd, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2a2143, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00042bbd7000fcdbdf25030000000500220000000000080009000300000008000900040000000800180064010102050012007f00000014002000fc0000000000000000000000000000000600010008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r5, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x2, 0x2, 0x6, &(0x7f0000000040)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf2501000000050012004600000006001b004e2400000c000f004000000000000000080009000100000008001700", @ANYRES32=r7, @ANYBLOB="0800090002005414b5497a591abecdf39200000098efaa2d670185b6d621a7334ffc3777"], 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x20000000) (async) 06:11:03 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000575187"], 0x2c}}, 0x0) 06:11:03 executing program 4: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03882ac01557126797a66ee62216ccd376c35550188d23d2dfe374ce8465093a12cdd7563635d3d88715da27b11a6814a104c8d834aca4aaa3f3a16529d606c675156a7cd8b0e71d68754dbf4d7543f7e03599a3ce1a7a704a23e9557fca8fe8d5981cd5d4e8fe026db0a523fcd443660d5ad8e732cef5a275830da83408d7ef0d90c0c4915ce07b85011f66c70b7b22c502edeeae39e1ccbfedfa09f29ce783ee8cabc309f81d0faf4360d10192e7879d588a5126042b9846a1e7084bbfbaab997a6838b049387535faf9226d6618"], 0x4) 06:11:03 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0x10) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r0, 0x2, 0x80000}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup=r0, r0, 0x1f, 0x4, r1}, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4841) [ 134.177341] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 134.185326] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 134.199057] Bluetooth: hci0: Received unexpected HCI Event 00000000 06:11:03 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x102, 0x3, {0x1, 0x1, 0x100, 0x1}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x1812c0) syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000001, 0x801) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x8001, 0xffffffff, '\x00', &(0x7f0000000140)=0xfa}) mmap$usbfs(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000001, 0x11, r1, 0x1) 06:11:03 executing program 4: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03882ac01557126797a66ee62216ccd376c35550188d23d2dfe374ce8465093a12cdd7563635d3d88715da27b11a6814a104c8d834aca4aaa3f3a16529d606c675156a7cd8b0e71d68754dbf4d7543f7e03599a3ce1a7a704a23e9557fca8fe8d5981cd5d4e8fe026db0a523fcd443660d5ad8e732cef5a275830da83408d7ef0d90c0c4915ce07b85011f66c70b7b22c502edeeae39e1ccbfedfa09f29ce783ee8cabc309f81d0faf4360d10192e7879d588a5126042b9846a1e7084bbfbaab997a6838b049387535faf9226d6618"], 0x4) 06:11:03 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0x10) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r0, 0x2, 0x80000}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup=r0, r0, 0x1f, 0x4, r1}, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4841) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0x10) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r0, 0x2, 0x80000}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup=r0, r0, 0x1f, 0x4, r1}, 0x14) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4841) (async) 06:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00WQ'], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048040) 06:11:03 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r7, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8f683cf3a0f4c95a, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000050) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10081) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004100}, 0x2000c801) [ 134.287507] Bluetooth: hci2 SCO packet for unknown connection handle 10888 06:11:03 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x102, 0x3, {0x1, 0x1, 0x100, 0x1}}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async, rerun: 64) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x1812c0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000001, 0x801) (async, rerun: 64) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x8001, 0xffffffff, '\x00', &(0x7f0000000140)=0xfa}) (rerun: 64) mmap$usbfs(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000001, 0x11, r1, 0x1) 06:11:03 executing program 4: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03882ac01557126797a66ee62216ccd376c35550188d23d2dfe374ce8465093a12cdd7563635d3d88715da27b11a6814a104c8d834aca4aaa3f3a16529d606c675156a7cd8b0e71d68754dbf4d7543f7e03599a3ce1a7a704a23e9557fca8fe8d5981cd5d4e8fe026db0a523fcd443660d5ad8e732cef5a275830da83408d7ef0d90c0c4915ce07b85011f66c70b7b22c502edeeae39e1ccbfedfa09f29ce783ee8cabc309f81d0faf4360d10192e7879d588a5126042b9846a1e7084bbfbaab997a6838b049387535faf9226d6618"], 0x4) [ 134.347309] Bluetooth: hci2 SCO packet for unknown connection handle 10888 06:11:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_timedsend(r0, 0x0, 0xfffffffffffffcf1, 0xfffffffffffffffe, 0x0) 06:11:03 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r7, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8f683cf3a0f4c95a, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000050) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10081) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004100}, 0x2000c801) 06:11:03 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r7, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8f683cf3a0f4c95a, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000050) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10081) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004100}, 0x2000c801) 06:11:03 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0x10) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r0, 0x2, 0x80000}) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup=r0, r0, 0x1f, 0x4, r1}, 0x14) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (rerun: 64) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4841) 06:11:03 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) 06:11:03 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x102, 0x3, {0x1, 0x1, 0x100, 0x1}}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x1812c0) syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000001, 0x801) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x8001, 0xffffffff, '\x00', &(0x7f0000000140)=0xfa}) (async) mmap$usbfs(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000001, 0x11, r1, 0x1) 06:11:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mq_timedsend(r0, 0x0, 0xfffffffffffffcf1, 0xfffffffffffffffe, 0x0) [ 134.410990] Bluetooth: hci2 SCO packet for unknown connection handle 10888 06:11:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_timedsend(r0, 0x0, 0xfffffffffffffcf1, 0xfffffffffffffffe, 0x0) 06:11:03 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async, rerun: 64) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r7, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8f683cf3a0f4c95a, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000050) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10081) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004100}, 0x2000c801) 06:11:03 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x3, r1, 0x6, 0x80000}) 06:11:03 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x5, @thr={&(0x7f0000000000)="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", &(0x7f0000001000)="4631dfe21df374d3382e32b6224794d44e77237bd220bc97670265f15a77be7403d8c0b2096a179ff9de9f1d23f0199ebe63d3aa3300b991020c982aa513dc73966181c3447000b607d1aac6221d45a058d54292f4e34389c9827e949b44affd30c7c493dcd0cbdd97e710b40d9df5fdfbbef77204b4030ce1e75edb5b76"}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:03 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r7, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8f683cf3a0f4c95a, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000050) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10081) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004100}, 0x2000c801) 06:11:03 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="55332b7b643d581ef61e78aab83a0da0e6f879bec3a4e0d8c879dc566341fca13fccbc43bed64536050e1a7f5bb8cfbfa9d439b66c88e3bfc95c77910541935aad894c2d323f1353fc277bc4b029856c6d45aaaa0b73ce32254c154427797a8e5fc6fe414ffcab47e4f428e79facf2a00e14472c1893c6775c055223840fd19cf862636ddfb1d2fa151e8a67ada74fb029361d5f9fcf36256dbf42d7bad0db2088a5abcab0066936fb5be3badd2ee3de1955b0e3943e1a68eeec1463e83f7a12ad37d598328c0f82828a20e9a1934ef613fef0b6c8ff322275e024d7371fbef341584363c3b3b6488226fa07149f735d141cc12c9fb80e2d3d9eddd1275617964c1cc5283e170f8d34ab2e90b2dbddcda6e49deea25b6c499ba3dba773b80e8845a8cc5840eeb277d4d6cce69c996c4faab0b8807e77f6345a6932de3952c4e584708eba935681f15fec414a1b5ce177a16f70f0f09b773bd7057446cae116ab5c0ba336abd7050b149f64221dc52c"], 0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async, rerun: 64) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) (rerun: 64) 06:11:04 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_notify(r0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={&(0x7f0000000040)="da9f940a9d5d1d51930c79fd5058942906a86c993e4901eb37bf34ab3ed7895c136864e465337a2b57edc44ddcf7fbe53407ee25263334e2d4d22cf5283473f7e51e750baf9510b2aaa38bde9e8e05c2559186d0ce63dac6bec63d0d7717f5b8112cd15657f20615aafaab3a1b6c34195a3924ab3d4c247457fde80a7c6faf2306dd0b46208b40d2c65146d7c248fa514fa455c61e1436b98545cc46b38f7686b4e7943ded7f0ce7a1b9930828bcda6f73a10db6a19ba52be47dda5ac3c786c68d6515b4795581d202e1a574786e1ed74b3a0dc599686a20d6991740d279c3bfe1c702b24f82c9a4e8f66fd6fac1aeaeeafe55", &(0x7f0000000140)="05f41f0b7a6267f43a289c03634731b0573a3e36d45b7a52b545fc7150519c97baab4957dd5af8e063a8f25cac5baad16d"}}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', r6, 0x7, 0x7, 0x400, 0x0, {{0x28, 0x4, 0x2, 0x2e, 0xa0, 0x66, 0x0, 0x68, 0x29, 0x0, @multicast2, @broadcast, {[@noop, @timestamp={0x44, 0x2c, 0xeb, 0x0, 0x3, [0xfffffffd, 0xffffffff, 0x10001, 0xeb, 0x9, 0x7fff, 0x0, 0xfffffeff, 0x20, 0x3]}, @lsrr={0x83, 0xb, 0x84, [@remote, @multicast2]}, @ssrr={0x89, 0xf, 0xdc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @generic={0x94, 0x11, "741fe3a826ee882b526b7d7100f9ed"}, @rr={0x7, 0x7, 0x57, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_addr={0x44, 0xc, 0xe, 0x1, 0x5, [{@broadcast}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x4, [0x1, 0x7]}, @generic={0x82, 0xe, "5fb14ebebe0589eb2825f9b1"}, @ra={0x94, 0x4}]}}}}}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r2) 06:11:04 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x3, r1, 0x6, 0x80000}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x3, r1, 0x6, 0x80000}) (async) 06:11:04 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x5, @thr={&(0x7f0000000000)="750ca2ef4249cc9a331c6e4463bd3d1b8a17a488e0f8d99d049f4f6a9c11759935337045d2244abff998bc871ef12d00c5d2f90eda0252c83e4e5b90cf456092cf39d50a3c9aaf0564cc560de5eb4c707f023c6b05fb269eaee26e5c628f02fb7de349500e9caa8d6b04d77b132e505771a6e0043e3c14e61bf9528baa9851d121c9a73687a48c6e58172ba48074429f03815a586424d0c2451f7023bf22948982454520b0e1d501709da0b29624025d89e7098e6174af5b321bd43c71d319f04b4f9b895eaea5854a578756fbecd47d37c37181e0ae20799ab541ed3db670bb37e8b067310dca66ebaaa2db61ab9a48c2345925b154f123e17ff1411423f6c915583e966cad9ebfdb84149837b3af47d80ed67ec01b700abb144a5a31436faebacf45f26358410e5f4f90e178c31e4f27ac7f5eb900c55d115ac38ae7b53e9d69a68382d52ffdf5902e71d952f00337b355f76356bc470084af51285b51c1a9e7533b375bb069c6e5df8f8a482bf4b31bb89a7c2d87204ed8d5d01559f253fcab7196d5c3ead4484957eb632e06dea2ea78c9ed744e42d7bdb87f2f7019801646bb9492ec3c148fb29c64d8c85dd1cff2da21989078a81cbcf74e0319ec891cf75c21b872506fcc1033c8ce2419dadc438ee05e62f90864275a2a2811a264c61a4fc742ac23324b85b543f3a01a8ea5509d1164c0a520673b318cb0503157f0e2bfa6f47637e9717394b722e522826a7105cecde0a6907a4a8ab0924d53bea8a4f65db12c9db1190110cb0969db05615531d2c6a2d715a5ee97c78f589f249d1bbabfd86c3cab9d9cf0a4664c89aa62b3a006e6c7125ad8a272595e3e20617844554439ac23577a1df3f4b5e5996d4cc18cdb1c30344e6d6635492c9bbec52ae78bfe6da1784719e6945def0687f318cea47f70d815b21396a5e7bba98f99addcc08206882353a7a313c6651abc8900198227998d13dbc27221f9c768cb584fb33c2b2f343a051420937361326a43fbc3d7605ff587368bc563be726675eafca6ebc56703ef67607b53ffaa9c5341684874a82b677ce5776af5d8031535a311ea95bec24596a69105dbe422d4538ee1d8eb4e076826921b8d48d128f5fe12cdba0d8e2d7b852cdbd1d1e0ac7f22d1f66b16773e5f4c174cce42fd08bfd9973d49059804d36d3e00509073293bf2e7e6d175e0712d5e5f8d1c8e31b9894252bfbbf136739465d1355cb60b9111ee683a861ad305551c2d128f684d25f85547271b067e3e757143adbcf617c2efba0decd766e9b86e66d55874a91f44a444255dbf512655a0d60a4241087e3aabacc74c03d323d9c3cf24d856f53b21b7dc66715355b9824af7d9c1a101ab41f35d7f74074eb858b75588deeaf1a9cd548566ee6c59ac234ac9cf7fe2b0c7ed794518d57570d93ab545c62419fb826fc31d6a8824dd0795677b0b9813cfcea061e70496ec0c2e4e3aeeb2628854dffd0e5d6f853dfaa3c058d8f2a34f5516f542d0db565c9b6bf12683ea5336fcf9f24ee4e9eb463358236192979c0112369d234e7fe7da5a6a59a9f4d57931dc40c35a92e3caa6776957a816cfd221d4b017db0cadc4c489bf161a24df1cbf0d4858e5d0960c30e4cb00a207362f225a71b701feb69d58edcc21168a17314584867062145729a7963f55f41903724918106ccd4ea7d8fdc638ee67fbaeacb59b67bd5a0c240ba2480dd0fc1a4a42cb4bab21ba242827fe2f71e9b798643ff6eb2d46ffb887670006bb59d1fe6f6f7247e0af54489d3493ecca8539fcdc6624ca6b707d13f2f496f876615e09ec6a38df609d2c4d1d830a4b7795a8433d7db90c96376cba36b8d2173b62894003d3f6fcb511685258325d9e5998478e64b8060ec87d6b2dcd814121026fe08de465a635a79646904c3160ee5ec09f47090292d9164cd2c75f6a7d981daff05085da5515fe1416e873bcb6f47fd27d3b325c1af3fda616eed968d153b63a9c4600b1eda0b9c87bb6c70222a7232b4cb953057220633091983b00a3f1f2a08e558a67c2b8adc1634afa299e87076cb453a620007ad199af200e62ca3339cc5439300b63c02d79acc347ab25764d62ec2a2cd9aa1971a377024b432e7d6ee75bfa4621360dad1d000ca55ecdeabe29c0a656e319928b85f479a55d86ba426b5b443f1e6ea305171c445ff5c8b9d13a3182e243607400177993bf71d8c4cec18c8204df7f644e8a94eb2e3e068b70f2b7121eedc5a0ca0a96ce40c58b0ac2a462160e4769cefc42c2830242f21a5cb8b4a7b2fd6129a56ab3b018700e6783c63babdf1dd161797733d75d4c76abe7579da3b30e2f34130d72866eb1b65ab4d7ab70de81b131e84077f14436033d44dcbe869a36aee79207ac64a10d357bcb84bee3565417a8bd877f1080165b0d4b9b9463cebc43027c08534614a0a108deaf828326c8f5b192aca55de4d2ec894a54f13455f018ac19124942d07790f176f06923594f341bd073a22e9fa431fb9e8472722c8ba5bc7e103158354cf50c40b243c4189ffb29fe59d49c52a323bea8a96609f1f4b9d5616024414f013dd689ce547bc5ae8f0b95bb3ba1bbbda049ae855af0c2fbcaadab4e431b522f44c2e541f126829134a64f1e523403d4b2568ffba03e7c3312d43e7955b578983b697cbac2a112eadcc1c6d1b8d13322bc85fc2c097929992a6898e63269903063b20d7198a176aa0be5457b5fcbb8cc4f10f3fb660f29e59079ae546d4573865806ac256aa2ec406c557dd997f89602fc943b6accc7e6e92d2df4904edf7bfdaf78bc3beb1a3e23d2421793f1c703ca9420db5cebb4df41bbf357a89a7fc5b626a2c3e69af1e64390d27494c81145f31fb31dc2aabc28cc6f984c610bdd2e4296239b2cdafddaee43537de15a2c82d4d3fd79f406eae5181acdc3ae79e2fe1cd75d8afce3961554b5e64f0d236bed75788b3876f881556fc801af0dbe87e5e93a0e310980a011f80878caac5ae87a201903eca6e7470a9b24bf2b4498f892898ef4c1ea40df5cebd717ec5bbdb5ab41520ca3ad3ca5e5725eddd8406578430be78a4789ae0e58a9fd79f22cd261a897bcd3a4c584b68e3b4ad5efdc4aa09144d611b45512745792b38cbc71d86f8865a0b4be61cc1d9f4d6911c03189af69a4697f5a7716abe5b74aa7a52768ab2bf1a897d05ade9e286d58e64f89195f78b92449f886cdc9369072a333cf9adfb6c8f36a7f826d3428942a23d920f86a1e7b6eea38dba600113f742d1fcc728cf4894fe1bf3090a8b91df1c05bd1276ecd23dcb2acfb772cb2dac9ad79690b5eb5eaa621b17c3038872e01cef99850f3e37d66ee7ba29952d1898b9874513b5d2c16e4d993a37cad2bb6b58788fc0590346f2d59b6306a00e705c5221800e0ea9cb547379e27f431d416c13877109d0cb7e917dcdbf7280254757df49914e22035e3559510a17970092356a9c735482490ed5aa11595ec0648c2e19af442104d74439a650c55938fa76967f20611275108c3cf1c6e8103de087c0e30e37903bcd2252a66ac64f040441020e28dd891f9dc8fa3b60968fb554833529d61af55d22cc7ca17445e96f6afc70a21f8a0140d650ecf9f8fe924597594eaa8fc71198f6c1a0faa5504a38ce93e6d68be6dabed89a3020c1daa4acecc8c6008534c992b396144b70f98af566e6dce215514e9d014db8d6a084c6d177b17007662c2aa96e6023184b0255fc11e4021d8fa802f69a0c23a80066da0569c6f0a3368e2298765086ca64dbd1a4f1902d288d092e2df077313d23481bd098689fd10469b7c8a822f745053d3797d711c762c02579cc70a70f2869e91418a69129c2155221dc245a9f04647fcddf6a26c820dde8c3ba2d603375b504d35f07b7e81534dc3c6d2925bd072c9ab26e851665ae77148f146c8b9b071ef5a7249e94289130f5f393a909863487c8d1f8a9192084279ac4fe61602d97f6d57d2ee886354c693d0109c7306c38d015c07c4a7dfa6aada86218333d69a6a226caf894434e513902719d6df323bd267fc49733c2572b0926dac11e55eaa3c3edc61e6e7e01101f0eff49f9908460cec768196aba63bda975b2cc81155ed696057267001936e40a46c0c23f3f0a3f9b096165a748d2f66059051f6aa42bb19a2c4e9cc2ae3b04cf1dbf198c9ad95c44e65ba44388757f6a9978f5f08e91df0f3ed254a07fcb5ea7e3db5c9deee4a852a1b3e6d411f99251d5bb352327302a776b2fcc5fb678f9a0dbf77d8581e3ad583457e09063cb7f864ead07dbca937ab6af2ad7a5dce5bf4fc5369262a1e4fc01368cb7b6d3fec50495884ca27ea3a78de6894684c732dfc858af9c42ab168e5d400e67a57ef565ad8ba21185f4222310f043a0f41b6108923de42f4a95e3c46cf13acf499641773ec2220f56582e9443b635192a68fc2d45fe83fd8d9af75ef9ad5d211adf10209a204fd59ae68a8d5f610cff62b954e384cb1ea99e32100426d03e310af6ffc2dae4f5996c7f6fdc1a4fb65e3e6d59682b29ebb8a58eef9cab1521a5839f8040661dbac057356179e11bc7c355c38febab8532d7662396dce1652af448b28d5af6aada7568b186e50f3ca72dadc4c53010846e2185a9f195064910116c8cef0602df09e7e4b6cf06e57414f0493034dfe94e07553ad31f98b7ee3701e96d3fb5d4c991a73971ca4ee5255f3358d0a604272661bca7418318174bc5e36d4ce800b89c02dcfc8610db9320af061f8d843a31e9e8cb4742fb5ecdc35ed8b769b9e81d214240bae59d02ca1415c9537227726d2255cb18ec8cb65d15bede325afd13b80afcf56dbb22ee2466dc35b7501b895d9b2a0706071f6a931fdd577d5d14029be6d341e6f7d8b22ae1d8d284495828c54c72638c802c864bdee6ea208598529f05fafa0e8032a38a7133802384af9f5f5567a450db9630314925227dc98129516e51c3fcb4fa2cd253cc3b0d7f969791c76d19b472f121fe70924e7680bb25891593d8c5a16b8bc144e5d2bf9791be23c1e88682be1303fd31186878cebfaf79523407d3cca21ed78a42d771b4cbe799b0162f861e1a1ce0990c23555272f7e9d25b94d3d77bfa83471825a9e64698eca009885ed033790feb113f69eb0d1a88eef1c495dabda1fdf89b04a5ad28f9bd43b3b4f29fd1ae3956cbdcad52473c07e57f0839cc841a9cd66c33a5652ab57c57974f907439803e32ce71b4bcb5c904ffbcb00b382a205ae6c0d162de55b64070162dd7cabc35a355a12268d5b086eaf75bd8cbbb14704c80f811431ca2de4112f38894f5ef2c50d7a25e6f33a549bfaf3b028aeb58f5a14e4887ebd2bd05f46017eff60cb9110d1094d7320d32717c8760c999144f0b61b4cec0bbcfe8e65f64ce4957b54e06a0e2fa69724fd7f7dbde824fcbe438041fb4f47e2bf8aa6b24bc399a2b7a998374027e9b9a0f0fb28274258ee11d03295997c6b9f81a82837c57f3e14ed57c7243935874a288ec4977e697ee4f1de728fd24db5a7faebae66880442c97a573759024fa8471e562fdb34eeaed36bceeb6d3888a24bd43666e6279a21649ccd4ab5652b9c9809d65e3518f2493c5b15fccb0dd48edff48f6f7a2edcaf3f2f686f7f3b9bf883b1cb672e782c0c10374dd8659c92f04a490582db940b274b558716195fb6f2a6c40306ae94e085143b7e413932d0d59ae8accf2e4e9b64109aa55fc158e95b5e50fd548ecc7b1fed7cecee402d5f319208a3607bdeeeaed59c5aa9aea589eff56441277ec4a6eccc98a6", &(0x7f0000001000)="4631dfe21df374d3382e32b6224794d44e77237bd220bc97670265f15a77be7403d8c0b2096a179ff9de9f1d23f0199ebe63d3aa3300b991020c982aa513dc73966181c3447000b607d1aac6221d45a058d54292f4e34389c9827e949b44affd30c7c493dcd0cbdd97e710b40d9df5fdfbbef77204b4030ce1e75edb5b76"}}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:04 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x10, 0x7f, 0xc0, 0x3f, 0x0, 0x6, 0x100, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x7f, 0x3ff}, 0x42208, 0x4, 0x80000000, 0x8, 0x5, 0x6, 0xef, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x40) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000080)={r1, r2}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r7, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8f683cf3a0f4c95a, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000050) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10081) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004100}, 0x2000c801) 06:11:04 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) 06:11:04 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_notify(r0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={&(0x7f0000000040)="da9f940a9d5d1d51930c79fd5058942906a86c993e4901eb37bf34ab3ed7895c136864e465337a2b57edc44ddcf7fbe53407ee25263334e2d4d22cf5283473f7e51e750baf9510b2aaa38bde9e8e05c2559186d0ce63dac6bec63d0d7717f5b8112cd15657f20615aafaab3a1b6c34195a3924ab3d4c247457fde80a7c6faf2306dd0b46208b40d2c65146d7c248fa514fa455c61e1436b98545cc46b38f7686b4e7943ded7f0ce7a1b9930828bcda6f73a10db6a19ba52be47dda5ac3c786c68d6515b4795581d202e1a574786e1ed74b3a0dc599686a20d6991740d279c3bfe1c702b24f82c9a4e8f66fd6fac1aeaeeafe55", &(0x7f0000000140)="05f41f0b7a6267f43a289c03634731b0573a3e36d45b7a52b545fc7150519c97baab4957dd5af8e063a8f25cac5baad16d"}}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="f8b420f7d65208e2825895cbc04a106493c6ecd7c30db35c74cd044b908173a4a65d4f6777d1e7c65666ecff1898c4becbf47269a6268afdfd63cd45edb6eec41cb95753f28a30fe22ea62728602393a54e5d5ae86e2adef01bc575dfdafa28396a8a004e727db3dc4c7573f7e7aac1be72750189ec86cb498ad4f1c6f8db8ef8c6bf0ffad100b83dcf87f3df9f37cc99a270c208ac2690bd0b43e7e84355377afeae1d4c167bdc3aecfe99f13544d9cdb1289f92098d282558549ce8f96c43e57248018bc9c0baf0ba056471523c8f215a4f196b9d3e228c0feb11006f285067ef183841a4bea1b0363114dea1abae7344dcee9ad04f36966184cc6c19685f8125e5bd2619df0c6da0a737511632754ac179d184ca020fdb56ce7c60afa2ddd7c53c620556baeb9fcb978cf0d67221d35a3162089ccbd6a77b92257ffbe6d775961c6bdebdee3f2260b72674ac1ff0dd362e506d0f66ffa8e2b561bfb1ac79b4c65ea1c23d5df63fe943badff4bfd0dcce77477407362d5f5aa85b6df91085468db7679ba914960d2ba9428ffed89e5050d972ae9d46faeebfd30dd216d294d688f28a901331096eda7fd068ccade7c0bcc314f1cf704c9407ddac13e7899d947c8ccd48b7b6db94cab677172caa8d9ae84ceae7dcb009510714e0fb71924879414571be784d11ea37fa11f61cc52ed1eaecbf4d207fff956f48c6744249c9b6b394e5b42cdf283790c0bdf26b9bcf821f0dcc108b42d3e67dc2325edb2dc338b9786191d1a683e4b1c7f7d9fb4cf4df396fffd1308c08e97275a3704342327fb41cb27de706e86e4230112caed89695c29da6ddc9a0dc98dc4116620c4a0f8c2f459bc58d8d8f15324f716660c7f5a62383cae29d731543102e0cb2f72efa36a1c4eec49283ab93be1aa9e4fa44fd448da451ca0458e46c49f0082dfeeb1a69f5d608ab41ad391994e70b6df5aa77d333e3dae8baf2211534505fbb52e4e7425acd01876f734c89197bc593ceb93800097e16b9df73006679bc8d7fe2aba34459f847bbe894fdd8e90ae480234e3bfaea035e1dd5090a1d3e1fd2555b54301d800838c5c90caaec93f939fbb92c078adf5336ff315504709c3db9b76ebf7131ca208995d136339debe243949b5a5f1d77d2d40ec0042283dfc2c866f25bb4d3e771b1a49fd24c3f1a9744451be1b5875ca2b782cd1dad49e31e9c2a84fe69cc7b8fb3b0bcd61e7d3013922ca47184d0f5f0da55d78d68d5d3bea011193eafcad2859921ad8902e0da9d1ee3351902546803cd8b80692b1725e38a95cbc1ba9360f9830fb8337b55136064a43defb850884633181231561bcef6a6cd1a6f6f3e31d5a61836b1220a58ef20447b33b1a5b9a23118cd9cc2a73164e9beb443ffc5c77119bfce65802c0fcc4c7c48810c041dcc96e502e373adbbe6dcfb52c814c4ed6493615eee77d49d1e88aef33324fcd09509f8361590a2ca401d218556b08407ac9beeb61cf9cf371344d651ec5a598eb5186645ea974aa2ccedc526d3c3a062f9815c4bd1fe5a7de1c8d52c212d9fc096ced2149f77ab87e10b969ee598792c4256e461e5553e1aa11107c6448088ca47903f0390bc9c4f72726d5a67ba3e496782bbfc5b721aaddb88ab5e0e0dd92ad266c9bda67285567e0d62257788b6612a81b48268c77d573700397e52678d2107d75cb094cc579629d270ee3d6bd7a6241bc0959156885b305d1785001582c1fcb8438b4bf4323855a21773657a637aa866d3ac692080b1eb59d403a1988d6a194b1e18a2c1da2c17ea3b5762eaf1da2677e8823bfd0894b754d2a5daab58a8c85d5e638ff3bc34ecc9eb83da757fb9e21c697b829eaa1e8fd3dbeacd56ca021e566b61b673738bb4832781f530a441c67100fb43c37045875d110352cebda3b117666545ff2c7a503714395c3eada7f96c87decf7c0b94c1ecc4b2a66077cc533198397665f16bc4587fb737865ab943dd7175472e987e93070dc7b98532012d6652c02edf51ed66328af712d1f54adc86f6abf9d58d1caac32943eafed55928bd4ed22fb2ba8bf3618527e81ed30cd4c88422cf020c6b285676e2630e61d87089e35dfe772a470b51764624daf8086b2e55cc9e2cdedf5738d72075c9e2774833e73cc78046744c7115a5be34f986fd29035193f7e53a90bc282b1fb363481d3e8a19d857cc0f3b746f420518dd2e4ee0840f859a5cab5531451f45803f11fafaea064e39d01ef84e882fea831e3b1bde14d0f1e2833fd830dba88e095e70d8bb73e46ef17f672272afd92817bc2247227644ed2a8c3b02ff3a575e591f32a1f1a2ad6f62364bb1e3621b632a78146831f7b533359d04a0aaba6c1191050fc1aa235c0c81c1655c583dd19b59e82b9279b234be895d43a64b5eac24a2929c09be9b8613a56d7e1831521eec541b17b00d1f34376dcd6b9cfb27d9b860d92aad03cc24df5b518eed95b0de9ca157c95b2c863ed01914f5cfa6af74540e05ca6f24dc0c3f13834cecb96e5eb93c2b0cf8fcb6500444e78d7475ff780d3b55f15e49d9982deb8e1f0d019a6596e7699753edd42b7060b30c6c53097f5797dad9e6826bc003c7c2b24d7cb4aa99a8fad788ce975326deebbb68dc4239b867fd377639f6b792cc0e9b2a13883e838fd374f8c13dafe1778636bc05288a7470c0747f9585f638995f7904ee8304ccce02f15f1b6d353c1980c62f9dde2f623d2c866ac3a3be38a6c14197d82cbf9cb5e2cb70c295672f8cd758b26d5b80a0490da942f8eef823db03ad7aca74badac25a9c08919d6b022f4a2f5aece3f87f64206e594836859a28d991b41cb26f50031a1cf81e89034367c9e495eb5d6a63ceb2753fbdeca51e21f68b384aadb2565958e25165d0d5d1cc202e10060d594d9e9543ba37cee602ced0daeef9add786e0483ac9e26c989a3a56b66573e40d73f8bfda11373bd2a2aaa7be5dd2993e4a4fa035f84c5f09fcd2a719fb24ad3a647c20331b700b6ee37d43283c8e72007ea1eeea50799b8abf87f69f57523e97f1f6c7f0b372eb1607ad86c1bb2b472d93419f1f5503a51b809544b4aa49fdc8850be00dec3911ab6f1c288914a7bdb8b2806848647f949590cbe699726380aab8fb36cb76f4b70458aee3f9db624673a85c7b44cbb93dcc22b006069cb511d303ea04fc8dbb3f0cdd486afc12ccf85722e77888a0510d69cb373d8a3c7e78d3f05512ebc72b7a958514cd263cc3cce8b44bfa44fee1e29b3e6b65acd686e6c264f8f55290fcfbf48b4f3a485f7214e9bd68a65550d97c0653d02a6dd616d35648600ae53e86074bf3fbb9344c265280becbb21b0697761bebb7a07764fd46fd4c401a1f6ad4489e2d802f83c3598356669f89192fc1c00fa3cafab79e3bf67f4bd4a34d343a11b9763d970390f1b7c58f5b8e2bde87ae5b86baa9e314c49aaec57e1b8591c0d3a8e3434792215ef497717fe378dc839c487a5ac7815566e17620bfc7ee825b3737519f6700ad0aa2143a8c602f8cb494988beed5900ef3ecbae468d0faea41bf766572290ae52fb9ee9116db6417eae07b165e0e8a89e0fc6a844f7de35c440f36109c88c552592e1589e32093ae5c829a126c6d7f9388546d31b1e54d3dddda16763208e0675b31c194bf850df42e580e13c56e9525437a944dddc70fad876f062f2d71ee8a98762369528d02f3c7995ab3bdd04f2fa980b65f6140e1c8e34c843dd242d8b202bf9d5695227b753bba2a5a5dae3f89c0b2c0e50be34350feb7d2ce74a5e9b14c038d5f840f6d2fa0d2bbf3ccf40c87850f2bce3f35af531a5a40f63e78f7b5be02e4fe65b413c1f0dac07b8a5d42c6de89690391b2fee8d7f27fb5bd73040fd76750280f9a28581de5e6cf583ebe62eba2940af27d23a267da9c4602b090cb5621800c837835fe9f6d301baa26d354e2f83eea8114c79d29965f874ee7233247a9aefafc87d262f0e99ff1f7260b28d303e700b0bea7886560eb39065638e1da0bfcc9bd06b1067b9a0cc67c38a595892e45bb99bc12b9333b25468ec181522d9a9d8bc6667750aaf12a3d5ca7ae5cf36c76787c3e442e7e5d2e6f70e40d02ec92450259a63fc3ab8e7aef938f195fa8d524865bf7c3687130356994960da1aeba60399b51341cccf50bb2e8e27bf084924bed6a694df336ecc6a7ad014032da05bdf7805a3c36d926460896a5ddf4fcbb4f3518852ee81a8ef8509b0e10ac4a24fff89cbad2b0b8e7a63ab06511300656b324cb5cde5269d75c24665bcfa01ab121ff991e5bab40b36156efe5c55565f4e6fe28191a06c2384073533c5832497a79bece09f15b396200aa5ec04c8a13cdca5eb2db0a3daa383b3f5907d305cae73e7370d03b6c2cfdecca1ea6653cce94f065aab7e102b5f1ff7eff871dc55f67cf5c86fdc3fda9ae418355195b624e882edcf9a9b2bb5fd111b6b611fa078b08f669a91feca0b1087f8adcf087956759d406f7a6e40dadc1f4acf883e674916a69e41b59ebf1b07f43fad839cb411c42f83df0aafecb8bd3242924d76d1476a7fbae7a6d6d058c81908477fc30e9b390651f3862132f835d54284b6f67e0b49a11e467840a6a9234e945feda97e15f1b19fbebd00bd1789ba61ad09a265d4383a63724388c7f2515cb291872e354af467f61353871660581b99fcfe79b83684af35ca24bdb1ad192b3cac095f326bba27e0b61bce2c94da927ce2d62d013f173e5d9f8db3328138107936e176abeb86ef230f09472a336c933ef7aaf61bb5e4ea173edd0a6706fe60d99a5d2dbf0bd8e5250715e9afd940935806a785b930bfd731b64dc1cb394ffd308ecb14add1b6209b718409842019c4175e115d261915423810da8ad5f97aa9870e5ae196f92d715f3902e131f2ce5b5d2bc598be8eba9cecea477fb99cca61080d0d3246070ed2067ecbe9beb52aaf11168850f1d8c08a2bec56835ceadfe4cf7a764cf00b5d9206ddc3afc7b9ac79e8debfc7c369bbf44b55d1ffcd8d6844e9f0d5c9aaaff9f7110a0722bb36bebcd783a68a5cd5a6d3dffbb617f4a8c4b9a4045addc984ea7801bd1d123e599d9e34ed8e1323d5bbb9b0ac6447d9ba0e3d3d8334e92e66aa498a126d72dacff6fb56dff3db7856fda6e9b5f4c4fc366981023c54004c7b0354cd98d07d778b8b06960c60e05156b274d205a62b9c46fa4a39450b7027f50c64c25f67f19b6fbd02f3c00bfc705c459d58a9743acc54fee66601c4642a10691c9ce48feab635197299807f37368d76223acf1642bbccd7e691aec07cbca711a86c86867335b7ade6cd6a2dadaaf797746c987c96f4cf3c225de11e01a6677500f9a55a975e390a2ab457b8dd9507b2fcd3bb7c82cbcfaeec276b7a74d988993fd45504beb78bc0aad73667a610152eb3deb8e1d77a844fc7035646b42695dcf7c7661de80f2a7d063d5bfad8e9122509be7afec3bc62a831fe21960d2914865b786ead225f637570eb47259abe66a10ebcce9a34652c2ca98ddd0d28266cbdf4b93c3d0a255551037e00b60d37d12a391ff156812b91b6c7b3a06c924c0b7e932bedd4d3c076d8762d0f730db03e33690450129972d47f3639d437b6e7f74c69ac61f09f6e39e83dde11f8df190ffa805b7aeff7f1b595f30df6ad3f430f729b2a50b9c51bfb5f30ed38347aac7c7e425eba4751ac84b5dd75997eda7f601732e5f1a101b70e9354806e3f451bbca9ae11d4303091d9e291380e394fd7c2791236d59cae74992a0b17ec033902942485291bd5"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', r6, 0x7, 0x7, 0x400, 0x0, {{0x28, 0x4, 0x2, 0x2e, 0xa0, 0x66, 0x0, 0x68, 0x29, 0x0, @multicast2, @broadcast, {[@noop, @timestamp={0x44, 0x2c, 0xeb, 0x0, 0x3, [0xfffffffd, 0xffffffff, 0x10001, 0xeb, 0x9, 0x7fff, 0x0, 0xfffffeff, 0x20, 0x3]}, @lsrr={0x83, 0xb, 0x84, [@remote, @multicast2]}, @ssrr={0x89, 0xf, 0xdc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @generic={0x94, 0x11, "741fe3a826ee882b526b7d7100f9ed"}, @rr={0x7, 0x7, 0x57, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_addr={0x44, 0xc, 0xe, 0x1, 0x5, [{@broadcast}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x4, [0x1, 0x7]}, @generic={0x82, 0xe, "5fb14ebebe0589eb2825f9b1"}, @ra={0x94, 0x4}]}}}}}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) mq_notify(r0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={&(0x7f0000000040)="da9f940a9d5d1d51930c79fd5058942906a86c993e4901eb37bf34ab3ed7895c136864e465337a2b57edc44ddcf7fbe53407ee25263334e2d4d22cf5283473f7e51e750baf9510b2aaa38bde9e8e05c2559186d0ce63dac6bec63d0d7717f5b8112cd15657f20615aafaab3a1b6c34195a3924ab3d4c247457fde80a7c6faf2306dd0b46208b40d2c65146d7c248fa514fa455c61e1436b98545cc46b38f7686b4e7943ded7f0ce7a1b9930828bcda6f73a10db6a19ba52be47dda5ac3c786c68d6515b4795581d202e1a574786e1ed74b3a0dc599686a20d6991740d279c3bfe1c702b24f82c9a4e8f66fd6fac1aeaeeafe55", &(0x7f0000000140)="05f41f0b7a6267f43a289c03634731b0573a3e36d45b7a52b545fc7150519c97baab4957dd5af8e063a8f25cac5baad16d"}}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r4, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', r6, 0x7, 0x7, 0x400, 0x0, {{0x28, 0x4, 0x2, 0x2e, 0xa0, 0x66, 0x0, 0x68, 0x29, 0x0, @multicast2, @broadcast, {[@noop, @timestamp={0x44, 0x2c, 0xeb, 0x0, 0x3, [0xfffffffd, 0xffffffff, 0x10001, 0xeb, 0x9, 0x7fff, 0x0, 0xfffffeff, 0x20, 0x3]}, @lsrr={0x83, 0xb, 0x84, [@remote, @multicast2]}, @ssrr={0x89, 0xf, 0xdc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @generic={0x94, 0x11, "741fe3a826ee882b526b7d7100f9ed"}, @rr={0x7, 0x7, 0x57, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_addr={0x44, 0xc, 0xe, 0x1, 0x5, [{@broadcast}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x4, [0x1, 0x7]}, @generic={0x82, 0xe, "5fb14ebebe0589eb2825f9b1"}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r2) (async) 06:11:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r7, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8f683cf3a0f4c95a, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000050) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10081) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004100}, 0x2000c801) 06:11:04 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x5, @thr={&(0x7f0000000000)="750ca2ef4249cc9a331c6e4463bd3d1b8a17a488e0f8d99d049f4f6a9c11759935337045d2244abff998bc871ef12d00c5d2f90eda0252c83e4e5b90cf456092cf39d50a3c9aaf0564cc560de5eb4c707f023c6b05fb269eaee26e5c628f02fb7de349500e9caa8d6b04d77b132e505771a6e0043e3c14e61bf9528baa9851d121c9a73687a48c6e58172ba48074429f03815a586424d0c2451f7023bf22948982454520b0e1d501709da0b29624025d89e7098e6174af5b321bd43c71d319f04b4f9b895eaea5854a578756fbecd47d37c37181e0ae20799ab541ed3db670bb37e8b067310dca66ebaaa2db61ab9a48c2345925b154f123e17ff1411423f6c915583e966cad9ebfdb84149837b3af47d80ed67ec01b700abb144a5a31436faebacf45f26358410e5f4f90e178c31e4f27ac7f5eb900c55d115ac38ae7b53e9d69a68382d52ffdf5902e71d952f00337b355f76356bc470084af51285b51c1a9e7533b375bb069c6e5df8f8a482bf4b31bb89a7c2d87204ed8d5d01559f253fcab7196d5c3ead4484957eb632e06dea2ea78c9ed744e42d7bdb87f2f7019801646bb9492ec3c148fb29c64d8c85dd1cff2da21989078a81cbcf74e0319ec891cf75c21b872506fcc1033c8ce2419dadc438ee05e62f90864275a2a2811a264c61a4fc742ac23324b85b543f3a01a8ea5509d1164c0a520673b318cb0503157f0e2bfa6f47637e9717394b722e522826a7105cecde0a6907a4a8ab0924d53bea8a4f65db12c9db1190110cb0969db05615531d2c6a2d715a5ee97c78f589f249d1bbabfd86c3cab9d9cf0a4664c89aa62b3a006e6c7125ad8a272595e3e20617844554439ac23577a1df3f4b5e5996d4cc18cdb1c30344e6d6635492c9bbec52ae78bfe6da1784719e6945def0687f318cea47f70d815b21396a5e7bba98f99addcc08206882353a7a313c6651abc8900198227998d13dbc27221f9c768cb584fb33c2b2f343a051420937361326a43fbc3d7605ff587368bc563be726675eafca6ebc56703ef67607b53ffaa9c5341684874a82b677ce5776af5d8031535a311ea95bec24596a69105dbe422d4538ee1d8eb4e076826921b8d48d128f5fe12cdba0d8e2d7b852cdbd1d1e0ac7f22d1f66b16773e5f4c174cce42fd08bfd9973d49059804d36d3e00509073293bf2e7e6d175e0712d5e5f8d1c8e31b9894252bfbbf136739465d1355cb60b9111ee683a861ad305551c2d128f684d25f85547271b067e3e757143adbcf617c2efba0decd766e9b86e66d55874a91f44a444255dbf512655a0d60a4241087e3aabacc74c03d323d9c3cf24d856f53b21b7dc66715355b9824af7d9c1a101ab41f35d7f74074eb858b75588deeaf1a9cd548566ee6c59ac234ac9cf7fe2b0c7ed794518d57570d93ab545c62419fb826fc31d6a8824dd0795677b0b9813cfcea061e70496ec0c2e4e3aeeb2628854dffd0e5d6f853dfaa3c058d8f2a34f5516f542d0db565c9b6bf12683ea5336fcf9f24ee4e9eb463358236192979c0112369d234e7fe7da5a6a59a9f4d57931dc40c35a92e3caa6776957a816cfd221d4b017db0cadc4c489bf161a24df1cbf0d4858e5d0960c30e4cb00a207362f225a71b701feb69d58edcc21168a17314584867062145729a7963f55f41903724918106ccd4ea7d8fdc638ee67fbaeacb59b67bd5a0c240ba2480dd0fc1a4a42cb4bab21ba242827fe2f71e9b798643ff6eb2d46ffb887670006bb59d1fe6f6f7247e0af54489d3493ecca8539fcdc6624ca6b707d13f2f496f876615e09ec6a38df609d2c4d1d830a4b7795a8433d7db90c96376cba36b8d2173b62894003d3f6fcb511685258325d9e5998478e64b8060ec87d6b2dcd814121026fe08de465a635a79646904c3160ee5ec09f47090292d9164cd2c75f6a7d981daff05085da5515fe1416e873bcb6f47fd27d3b325c1af3fda616eed968d153b63a9c4600b1eda0b9c87bb6c70222a7232b4cb953057220633091983b00a3f1f2a08e558a67c2b8adc1634afa299e87076cb453a620007ad199af200e62ca3339cc5439300b63c02d79acc347ab25764d62ec2a2cd9aa1971a377024b432e7d6ee75bfa4621360dad1d000ca55ecdeabe29c0a656e319928b85f479a55d86ba426b5b443f1e6ea305171c445ff5c8b9d13a3182e243607400177993bf71d8c4cec18c8204df7f644e8a94eb2e3e068b70f2b7121eedc5a0ca0a96ce40c58b0ac2a462160e4769cefc42c2830242f21a5cb8b4a7b2fd6129a56ab3b018700e6783c63babdf1dd161797733d75d4c76abe7579da3b30e2f34130d72866eb1b65ab4d7ab70de81b131e84077f14436033d44dcbe869a36aee79207ac64a10d357bcb84bee3565417a8bd877f1080165b0d4b9b9463cebc43027c08534614a0a108deaf828326c8f5b192aca55de4d2ec894a54f13455f018ac19124942d07790f176f06923594f341bd073a22e9fa431fb9e8472722c8ba5bc7e103158354cf50c40b243c4189ffb29fe59d49c52a323bea8a96609f1f4b9d5616024414f013dd689ce547bc5ae8f0b95bb3ba1bbbda049ae855af0c2fbcaadab4e431b522f44c2e541f126829134a64f1e523403d4b2568ffba03e7c3312d43e7955b578983b697cbac2a112eadcc1c6d1b8d13322bc85fc2c097929992a6898e63269903063b20d7198a176aa0be5457b5fcbb8cc4f10f3fb660f29e59079ae546d4573865806ac256aa2ec406c557dd997f89602fc943b6accc7e6e92d2df4904edf7bfdaf78bc3beb1a3e23d2421793f1c703ca9420db5cebb4df41bbf357a89a7fc5b626a2c3e69af1e64390d27494c81145f31fb31dc2aabc28cc6f984c610bdd2e4296239b2cdafddaee43537de15a2c82d4d3fd79f406eae5181acdc3ae79e2fe1cd75d8afce3961554b5e64f0d236bed75788b3876f881556fc801af0dbe87e5e93a0e310980a011f80878caac5ae87a201903eca6e7470a9b24bf2b4498f892898ef4c1ea40df5cebd717ec5bbdb5ab41520ca3ad3ca5e5725eddd8406578430be78a4789ae0e58a9fd79f22cd261a897bcd3a4c584b68e3b4ad5efdc4aa09144d611b45512745792b38cbc71d86f8865a0b4be61cc1d9f4d6911c03189af69a4697f5a7716abe5b74aa7a52768ab2bf1a897d05ade9e286d58e64f89195f78b92449f886cdc9369072a333cf9adfb6c8f36a7f826d3428942a23d920f86a1e7b6eea38dba600113f742d1fcc728cf4894fe1bf3090a8b91df1c05bd1276ecd23dcb2acfb772cb2dac9ad79690b5eb5eaa621b17c3038872e01cef99850f3e37d66ee7ba29952d1898b9874513b5d2c16e4d993a37cad2bb6b58788fc0590346f2d59b6306a00e705c5221800e0ea9cb547379e27f431d416c13877109d0cb7e917dcdbf7280254757df49914e22035e3559510a17970092356a9c735482490ed5aa11595ec0648c2e19af442104d74439a650c55938fa76967f20611275108c3cf1c6e8103de087c0e30e37903bcd2252a66ac64f040441020e28dd891f9dc8fa3b60968fb554833529d61af55d22cc7ca17445e96f6afc70a21f8a0140d650ecf9f8fe924597594eaa8fc71198f6c1a0faa5504a38ce93e6d68be6dabed89a3020c1daa4acecc8c6008534c992b396144b70f98af566e6dce215514e9d014db8d6a084c6d177b17007662c2aa96e6023184b0255fc11e4021d8fa802f69a0c23a80066da0569c6f0a3368e2298765086ca64dbd1a4f1902d288d092e2df077313d23481bd098689fd10469b7c8a822f745053d3797d711c762c02579cc70a70f2869e91418a69129c2155221dc245a9f04647fcddf6a26c820dde8c3ba2d603375b504d35f07b7e81534dc3c6d2925bd072c9ab26e851665ae77148f146c8b9b071ef5a7249e94289130f5f393a909863487c8d1f8a9192084279ac4fe61602d97f6d57d2ee886354c693d0109c7306c38d015c07c4a7dfa6aada86218333d69a6a226caf894434e513902719d6df323bd267fc49733c2572b0926dac11e55eaa3c3edc61e6e7e01101f0eff49f9908460cec768196aba63bda975b2cc81155ed696057267001936e40a46c0c23f3f0a3f9b096165a748d2f66059051f6aa42bb19a2c4e9cc2ae3b04cf1dbf198c9ad95c44e65ba44388757f6a9978f5f08e91df0f3ed254a07fcb5ea7e3db5c9deee4a852a1b3e6d411f99251d5bb352327302a776b2fcc5fb678f9a0dbf77d8581e3ad583457e09063cb7f864ead07dbca937ab6af2ad7a5dce5bf4fc5369262a1e4fc01368cb7b6d3fec50495884ca27ea3a78de6894684c732dfc858af9c42ab168e5d400e67a57ef565ad8ba21185f4222310f043a0f41b6108923de42f4a95e3c46cf13acf499641773ec2220f56582e9443b635192a68fc2d45fe83fd8d9af75ef9ad5d211adf10209a204fd59ae68a8d5f610cff62b954e384cb1ea99e32100426d03e310af6ffc2dae4f5996c7f6fdc1a4fb65e3e6d59682b29ebb8a58eef9cab1521a5839f8040661dbac057356179e11bc7c355c38febab8532d7662396dce1652af448b28d5af6aada7568b186e50f3ca72dadc4c53010846e2185a9f195064910116c8cef0602df09e7e4b6cf06e57414f0493034dfe94e07553ad31f98b7ee3701e96d3fb5d4c991a73971ca4ee5255f3358d0a604272661bca7418318174bc5e36d4ce800b89c02dcfc8610db9320af061f8d843a31e9e8cb4742fb5ecdc35ed8b769b9e81d214240bae59d02ca1415c9537227726d2255cb18ec8cb65d15bede325afd13b80afcf56dbb22ee2466dc35b7501b895d9b2a0706071f6a931fdd577d5d14029be6d341e6f7d8b22ae1d8d284495828c54c72638c802c864bdee6ea208598529f05fafa0e8032a38a7133802384af9f5f5567a450db9630314925227dc98129516e51c3fcb4fa2cd253cc3b0d7f969791c76d19b472f121fe70924e7680bb25891593d8c5a16b8bc144e5d2bf9791be23c1e88682be1303fd31186878cebfaf79523407d3cca21ed78a42d771b4cbe799b0162f861e1a1ce0990c23555272f7e9d25b94d3d77bfa83471825a9e64698eca009885ed033790feb113f69eb0d1a88eef1c495dabda1fdf89b04a5ad28f9bd43b3b4f29fd1ae3956cbdcad52473c07e57f0839cc841a9cd66c33a5652ab57c57974f907439803e32ce71b4bcb5c904ffbcb00b382a205ae6c0d162de55b64070162dd7cabc35a355a12268d5b086eaf75bd8cbbb14704c80f811431ca2de4112f38894f5ef2c50d7a25e6f33a549bfaf3b028aeb58f5a14e4887ebd2bd05f46017eff60cb9110d1094d7320d32717c8760c999144f0b61b4cec0bbcfe8e65f64ce4957b54e06a0e2fa69724fd7f7dbde824fcbe438041fb4f47e2bf8aa6b24bc399a2b7a998374027e9b9a0f0fb28274258ee11d03295997c6b9f81a82837c57f3e14ed57c7243935874a288ec4977e697ee4f1de728fd24db5a7faebae66880442c97a573759024fa8471e562fdb34eeaed36bceeb6d3888a24bd43666e6279a21649ccd4ab5652b9c9809d65e3518f2493c5b15fccb0dd48edff48f6f7a2edcaf3f2f686f7f3b9bf883b1cb672e782c0c10374dd8659c92f04a490582db940b274b558716195fb6f2a6c40306ae94e085143b7e413932d0d59ae8accf2e4e9b64109aa55fc158e95b5e50fd548ecc7b1fed7cecee402d5f319208a3607bdeeeaed59c5aa9aea589eff56441277ec4a6eccc98a6", &(0x7f0000001000)="4631dfe21df374d3382e32b6224794d44e77237bd220bc97670265f15a77be7403d8c0b2096a179ff9de9f1d23f0199ebe63d3aa3300b991020c982aa513dc73966181c3447000b607d1aac6221d45a058d54292f4e34389c9827e949b44affd30c7c493dcd0cbdd97e710b40d9df5fdfbbef77204b4030ce1e75edb5b76"}}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:04 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x10, 0x7f, 0xc0, 0x3f, 0x0, 0x6, 0x100, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x7f, 0x3ff}, 0x42208, 0x4, 0x80000000, 0x8, 0x5, 0x6, 0xef, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x2) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x40) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000080)={r1, r2}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:04 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x3, r1, 0x6, 0x80000}) (rerun: 64) 06:11:04 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000d40)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xcb19}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48001}, 0x8841) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd0ba}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c080) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x486814d6f9826dca, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4721}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000740)={{&(0x7f00000006c0)={'Accelerator\x00', {&(0x7f0000000400)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {0x4}, {&(0x7f0000000340)=@adf_dec={@normal='NumberCyInstances\x00', {0x3f}}}}}, {&(0x7f0000000640)={'GENERAL\x00', {&(0x7f0000000580)=@adf_dec={@bank={'Bank', '2', 'CoreAffinity\x00'}, {0x6}, {&(0x7f00000004c0)=@adf_str={@format={'Dc', '3', 'BankNumber\x00'}, {"a3f193f9cd61c85d7034ea3072031e59e46a52358b7ba84884811c8d60ccc19d9a92c18c3de40f329c1e4dc6888b994734ef3324fab1c1ef825e613258aaff42"}}}}}}}}}, 0x3f}) syslog(0x3, &(0x7f0000000780)=""/158, 0x9e) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8814) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r1, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@cgroup=r1, r1, 0x26}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0x8041) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff00}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x14008000) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x29, 0x75, 0x3, 0x8, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x7, 0x2, 0x7ff}}) socket(0xa, 0x6, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="f4"], 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 06:11:04 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x10, 0x7f, 0xc0, 0x3f, 0x0, 0x6, 0x100, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x7f, 0x3ff}, 0x42208, 0x4, 0x80000000, 0x8, 0x5, 0x6, 0xef, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x40) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000080)={r1, r2}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x10, 0x7f, 0xc0, 0x3f, 0x0, 0x6, 0x100, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x7f, 0x3ff}, 0x42208, 0x4, 0x80000000, 0x8, 0x5, 0x6, 0xef, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x2) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x40) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000080)={r1, r2}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:11:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r5, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8f683cf3a0f4c95a, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000050) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10081) 06:11:04 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mq_notify(r0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={&(0x7f0000000040)="da9f940a9d5d1d51930c79fd5058942906a86c993e4901eb37bf34ab3ed7895c136864e465337a2b57edc44ddcf7fbe53407ee25263334e2d4d22cf5283473f7e51e750baf9510b2aaa38bde9e8e05c2559186d0ce63dac6bec63d0d7717f5b8112cd15657f20615aafaab3a1b6c34195a3924ab3d4c247457fde80a7c6faf2306dd0b46208b40d2c65146d7c248fa514fa455c61e1436b98545cc46b38f7686b4e7943ded7f0ce7a1b9930828bcda6f73a10db6a19ba52be47dda5ac3c786c68d6515b4795581d202e1a574786e1ed74b3a0dc599686a20d6991740d279c3bfe1c702b24f82c9a4e8f66fd6fac1aeaeeafe55", &(0x7f0000000140)="05f41f0b7a6267f43a289c03634731b0573a3e36d45b7a52b545fc7150519c97baab4957dd5af8e063a8f25cac5baad16d"}}) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r4, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="f8b420f7d65208e2825895cbc04a106493c6ecd7c30db35c74cd044b908173a4a65d4f6777d1e7c65666ecff1898c4becbf47269a6268afdfd63cd45edb6eec41cb95753f28a30fe22ea62728602393a54e5d5ae86e2adef01bc575dfdafa28396a8a004e727db3dc4c7573f7e7aac1be72750189ec86cb498ad4f1c6f8db8ef8c6bf0ffad100b83dcf87f3df9f37cc99a270c208ac2690bd0b43e7e84355377afeae1d4c167bdc3aecfe99f13544d9cdb1289f92098d282558549ce8f96c43e57248018bc9c0baf0ba056471523c8f215a4f196b9d3e228c0feb11006f285067ef183841a4bea1b0363114dea1abae7344dcee9ad04f36966184cc6c19685f8125e5bd2619df0c6da0a737511632754ac179d184ca020fdb56ce7c60afa2ddd7c53c620556baeb9fcb978cf0d67221d35a3162089ccbd6a77b92257ffbe6d775961c6bdebdee3f2260b72674ac1ff0dd362e506d0f66ffa8e2b561bfb1ac79b4c65ea1c23d5df63fe943badff4bfd0dcce77477407362d5f5aa85b6df91085468db7679ba914960d2ba9428ffed89e5050d972ae9d46faeebfd30dd216d294d688f28a901331096eda7fd068ccade7c0bcc314f1cf704c9407ddac13e7899d947c8ccd48b7b6db94cab677172caa8d9ae84ceae7dcb009510714e0fb71924879414571be784d11ea37fa11f61cc52ed1eaecbf4d207fff956f48c6744249c9b6b394e5b42cdf283790c0bdf26b9bcf821f0dcc108b42d3e67dc2325edb2dc338b9786191d1a683e4b1c7f7d9fb4cf4df396fffd1308c08e97275a3704342327fb41cb27de706e86e4230112caed89695c29da6ddc9a0dc98dc4116620c4a0f8c2f459bc58d8d8f15324f716660c7f5a62383cae29d731543102e0cb2f72efa36a1c4eec49283ab93be1aa9e4fa44fd448da451ca0458e46c49f0082dfeeb1a69f5d608ab41ad391994e70b6df5aa77d333e3dae8baf2211534505fbb52e4e7425acd01876f734c89197bc593ceb93800097e16b9df73006679bc8d7fe2aba34459f847bbe894fdd8e90ae480234e3bfaea035e1dd5090a1d3e1fd2555b54301d800838c5c90caaec93f939fbb92c078adf5336ff315504709c3db9b76ebf7131ca208995d136339debe243949b5a5f1d77d2d40ec0042283dfc2c866f25bb4d3e771b1a49fd24c3f1a9744451be1b5875ca2b782cd1dad49e31e9c2a84fe69cc7b8fb3b0bcd61e7d3013922ca47184d0f5f0da55d78d68d5d3bea011193eafcad2859921ad8902e0da9d1ee3351902546803cd8b80692b1725e38a95cbc1ba9360f9830fb8337b55136064a43defb850884633181231561bcef6a6cd1a6f6f3e31d5a61836b1220a58ef20447b33b1a5b9a23118cd9cc2a73164e9beb443ffc5c77119bfce65802c0fcc4c7c48810c041dcc96e502e373adbbe6dcfb52c814c4ed6493615eee77d49d1e88aef33324fcd09509f8361590a2ca401d218556b08407ac9beeb61cf9cf371344d651ec5a598eb5186645ea974aa2ccedc526d3c3a062f9815c4bd1fe5a7de1c8d52c212d9fc096ced2149f77ab87e10b969ee598792c4256e461e5553e1aa11107c6448088ca47903f0390bc9c4f72726d5a67ba3e496782bbfc5b721aaddb88ab5e0e0dd92ad266c9bda67285567e0d62257788b6612a81b48268c77d573700397e52678d2107d75cb094cc579629d270ee3d6bd7a6241bc0959156885b305d1785001582c1fcb8438b4bf4323855a21773657a637aa866d3ac692080b1eb59d403a1988d6a194b1e18a2c1da2c17ea3b5762eaf1da2677e8823bfd0894b754d2a5daab58a8c85d5e638ff3bc34ecc9eb83da757fb9e21c697b829eaa1e8fd3dbeacd56ca021e566b61b673738bb4832781f530a441c67100fb43c37045875d110352cebda3b117666545ff2c7a503714395c3eada7f96c87decf7c0b94c1ecc4b2a66077cc533198397665f16bc4587fb737865ab943dd7175472e987e93070dc7b98532012d6652c02edf51ed66328af712d1f54adc86f6abf9d58d1caac32943eafed55928bd4ed22fb2ba8bf3618527e81ed30cd4c88422cf020c6b285676e2630e61d87089e35dfe772a470b51764624daf8086b2e55cc9e2cdedf5738d72075c9e2774833e73cc78046744c7115a5be34f986fd29035193f7e53a90bc282b1fb363481d3e8a19d857cc0f3b746f420518dd2e4ee0840f859a5cab5531451f45803f11fafaea064e39d01ef84e882fea831e3b1bde14d0f1e2833fd830dba88e095e70d8bb73e46ef17f672272afd92817bc2247227644ed2a8c3b02ff3a575e591f32a1f1a2ad6f62364bb1e3621b632a78146831f7b533359d04a0aaba6c1191050fc1aa235c0c81c1655c583dd19b59e82b9279b234be895d43a64b5eac24a2929c09be9b8613a56d7e1831521eec541b17b00d1f34376dcd6b9cfb27d9b860d92aad03cc24df5b518eed95b0de9ca157c95b2c863ed01914f5cfa6af74540e05ca6f24dc0c3f13834cecb96e5eb93c2b0cf8fcb6500444e78d7475ff780d3b55f15e49d9982deb8e1f0d019a6596e7699753edd42b7060b30c6c53097f5797dad9e6826bc003c7c2b24d7cb4aa99a8fad788ce975326deebbb68dc4239b867fd377639f6b792cc0e9b2a13883e838fd374f8c13dafe1778636bc05288a7470c0747f9585f638995f7904ee8304ccce02f15f1b6d353c1980c62f9dde2f623d2c866ac3a3be38a6c14197d82cbf9cb5e2cb70c295672f8cd758b26d5b80a0490da942f8eef823db03ad7aca74badac25a9c08919d6b022f4a2f5aece3f87f64206e594836859a28d991b41cb26f50031a1cf81e89034367c9e495eb5d6a63ceb2753fbdeca51e21f68b384aadb2565958e25165d0d5d1cc202e10060d594d9e9543ba37cee602ced0daeef9add786e0483ac9e26c989a3a56b66573e40d73f8bfda11373bd2a2aaa7be5dd2993e4a4fa035f84c5f09fcd2a719fb24ad3a647c20331b700b6ee37d43283c8e72007ea1eeea50799b8abf87f69f57523e97f1f6c7f0b372eb1607ad86c1bb2b472d93419f1f5503a51b809544b4aa49fdc8850be00dec3911ab6f1c288914a7bdb8b2806848647f949590cbe699726380aab8fb36cb76f4b70458aee3f9db624673a85c7b44cbb93dcc22b006069cb511d303ea04fc8dbb3f0cdd486afc12ccf85722e77888a0510d69cb373d8a3c7e78d3f05512ebc72b7a958514cd263cc3cce8b44bfa44fee1e29b3e6b65acd686e6c264f8f55290fcfbf48b4f3a485f7214e9bd68a65550d97c0653d02a6dd616d35648600ae53e86074bf3fbb9344c265280becbb21b0697761bebb7a07764fd46fd4c401a1f6ad4489e2d802f83c3598356669f89192fc1c00fa3cafab79e3bf67f4bd4a34d343a11b9763d970390f1b7c58f5b8e2bde87ae5b86baa9e314c49aaec57e1b8591c0d3a8e3434792215ef497717fe378dc839c487a5ac7815566e17620bfc7ee825b3737519f6700ad0aa2143a8c602f8cb494988beed5900ef3ecbae468d0faea41bf766572290ae52fb9ee9116db6417eae07b165e0e8a89e0fc6a844f7de35c440f36109c88c552592e1589e32093ae5c829a126c6d7f9388546d31b1e54d3dddda16763208e0675b31c194bf850df42e580e13c56e9525437a944dddc70fad876f062f2d71ee8a98762369528d02f3c7995ab3bdd04f2fa980b65f6140e1c8e34c843dd242d8b202bf9d5695227b753bba2a5a5dae3f89c0b2c0e50be34350feb7d2ce74a5e9b14c038d5f840f6d2fa0d2bbf3ccf40c87850f2bce3f35af531a5a40f63e78f7b5be02e4fe65b413c1f0dac07b8a5d42c6de89690391b2fee8d7f27fb5bd73040fd76750280f9a28581de5e6cf583ebe62eba2940af27d23a267da9c4602b090cb5621800c837835fe9f6d301baa26d354e2f83eea8114c79d29965f874ee7233247a9aefafc87d262f0e99ff1f7260b28d303e700b0bea7886560eb39065638e1da0bfcc9bd06b1067b9a0cc67c38a595892e45bb99bc12b9333b25468ec181522d9a9d8bc6667750aaf12a3d5ca7ae5cf36c76787c3e442e7e5d2e6f70e40d02ec92450259a63fc3ab8e7aef938f195fa8d524865bf7c3687130356994960da1aeba60399b51341cccf50bb2e8e27bf084924bed6a694df336ecc6a7ad014032da05bdf7805a3c36d926460896a5ddf4fcbb4f3518852ee81a8ef8509b0e10ac4a24fff89cbad2b0b8e7a63ab06511300656b324cb5cde5269d75c24665bcfa01ab121ff991e5bab40b36156efe5c55565f4e6fe28191a06c2384073533c5832497a79bece09f15b396200aa5ec04c8a13cdca5eb2db0a3daa383b3f5907d305cae73e7370d03b6c2cfdecca1ea6653cce94f065aab7e102b5f1ff7eff871dc55f67cf5c86fdc3fda9ae418355195b624e882edcf9a9b2bb5fd111b6b611fa078b08f669a91feca0b1087f8adcf087956759d406f7a6e40dadc1f4acf883e674916a69e41b59ebf1b07f43fad839cb411c42f83df0aafecb8bd3242924d76d1476a7fbae7a6d6d058c81908477fc30e9b390651f3862132f835d54284b6f67e0b49a11e467840a6a9234e945feda97e15f1b19fbebd00bd1789ba61ad09a265d4383a63724388c7f2515cb291872e354af467f61353871660581b99fcfe79b83684af35ca24bdb1ad192b3cac095f326bba27e0b61bce2c94da927ce2d62d013f173e5d9f8db3328138107936e176abeb86ef230f09472a336c933ef7aaf61bb5e4ea173edd0a6706fe60d99a5d2dbf0bd8e5250715e9afd940935806a785b930bfd731b64dc1cb394ffd308ecb14add1b6209b718409842019c4175e115d261915423810da8ad5f97aa9870e5ae196f92d715f3902e131f2ce5b5d2bc598be8eba9cecea477fb99cca61080d0d3246070ed2067ecbe9beb52aaf11168850f1d8c08a2bec56835ceadfe4cf7a764cf00b5d9206ddc3afc7b9ac79e8debfc7c369bbf44b55d1ffcd8d6844e9f0d5c9aaaff9f7110a0722bb36bebcd783a68a5cd5a6d3dffbb617f4a8c4b9a4045addc984ea7801bd1d123e599d9e34ed8e1323d5bbb9b0ac6447d9ba0e3d3d8334e92e66aa498a126d72dacff6fb56dff3db7856fda6e9b5f4c4fc366981023c54004c7b0354cd98d07d778b8b06960c60e05156b274d205a62b9c46fa4a39450b7027f50c64c25f67f19b6fbd02f3c00bfc705c459d58a9743acc54fee66601c4642a10691c9ce48feab635197299807f37368d76223acf1642bbccd7e691aec07cbca711a86c86867335b7ade6cd6a2dadaaf797746c987c96f4cf3c225de11e01a6677500f9a55a975e390a2ab457b8dd9507b2fcd3bb7c82cbcfaeec276b7a74d988993fd45504beb78bc0aad73667a610152eb3deb8e1d77a844fc7035646b42695dcf7c7661de80f2a7d063d5bfad8e9122509be7afec3bc62a831fe21960d2914865b786ead225f637570eb47259abe66a10ebcce9a34652c2ca98ddd0d28266cbdf4b93c3d0a255551037e00b60d37d12a391ff156812b91b6c7b3a06c924c0b7e932bedd4d3c076d8762d0f730db03e33690450129972d47f3639d437b6e7f74c69ac61f09f6e39e83dde11f8df190ffa805b7aeff7f1b595f30df6ad3f430f729b2a50b9c51bfb5f30ed38347aac7c7e425eba4751ac84b5dd75997eda7f601732e5f1a101b70e9354806e3f451bbca9ae11d4303091d9e291380e394fd7c2791236d59cae74992a0b17ec033902942485291bd5"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', r6, 0x7, 0x7, 0x400, 0x0, {{0x28, 0x4, 0x2, 0x2e, 0xa0, 0x66, 0x0, 0x68, 0x29, 0x0, @multicast2, @broadcast, {[@noop, @timestamp={0x44, 0x2c, 0xeb, 0x0, 0x3, [0xfffffffd, 0xffffffff, 0x10001, 0xeb, 0x9, 0x7fff, 0x0, 0xfffffeff, 0x20, 0x3]}, @lsrr={0x83, 0xb, 0x84, [@remote, @multicast2]}, @ssrr={0x89, 0xf, 0xdc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @generic={0x94, 0x11, "741fe3a826ee882b526b7d7100f9ed"}, @rr={0x7, 0x7, 0x57, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_addr={0x44, 0xc, 0xe, 0x1, 0x5, [{@broadcast}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x4, [0x1, 0x7]}, @generic={0x82, 0xe, "5fb14ebebe0589eb2825f9b1"}, @ra={0x94, 0x4}]}}}}}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r2) 06:11:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0xb26, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="09ece6535341663b6932858fc4139630e47f23f049f9702166ddb4365f19e7459b179323aa0d2d65ff8944ac615b8f2f599c990000000000000000000000000000004788305cff74fbf538994f56eecd759c140a89218553dc773661e98859fd79fea5e0469223dc5c7735263728ed567f9e9f52168a848bf1af0ffa7e4e4239dd253a681a9b6c04425cd7904e4131254ebec46c7bb9e58d92e8fd88d9bbb07dec43ba0c3b58", @ANYRES16=r2], 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 06:11:04 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x33, 0x0, @thr={&(0x7f00000001c0)="b50f1b05feef3f114a40e44266991068b554bbefe1db5204992c60f87e4aeb22482e690e24a684610cc0e30eca5facf2cfdfa9d15d64402be3accd7ab9add8bd86f1f3e99ee9d6e25df3e2f7f4046cfde2c78da67092630f12ca185e5ebc0c59aee6eab62eb12a69970848127b759ef6dfa8ff571ed5144b6807d9600b4f3351fb7c7a5900a34c0358a21f253b5e39966dd5a9471babdfff5a77b2", &(0x7f00000000c0)="010b3f3d164e56bf248f28cdf104359274bd7b954e9b3576772b32081a0755fa7e1363a5ce6c725e236d474e640220d427523dca987cb62e9da97c5d3d7ffd2aae3151571a7b5b93e7b8f456442822cb9d033d68b1b3d01c9ed1ed80486843f6a73ec655635d9238e187a4e543c3a16fc823b6709ab5816dfa525a981abeac94c95c86a6e2432cca944051b8de96a09f99d197cfeb91df2f04103070af86e573578e76e665877d11bccb132a2af7dbe1ef86a21fb4ac18fabaa400d75cb0843a3aba66e362dac2ba7fe7c8c0bb9a9c2edfdc0c4bea2a9d9da2f969"}}) 06:11:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000380)=0x5, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}}, 0x20040080) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map=r2, 0xffffffffffffffff, 0x23}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="63c1abb77e5f8d46505e939c63f3004fabab74d3cd29e47dc32b143bd679687fb4252e352e9f8007532362957a9cd70b0cdb6d3c9d37f28b7334ac4eb39e232965a902cd2022874011fdc14927e48a4ef823", @ANYBLOB="4c8d819266ba8fe5f90476e256dfd32b56039405b831d175f8a98c661f245b5fced4c621945638ade284924b8dcb83cb3503d49fafadb5a86926c7c9564b4750132c98d4c1a6cd9316fe0dda66d1235b19914c6165616de95efffec0cadd60b6ce60e2ba6dcb5db2277382eb27", @ANYRES64=0x0, @ANYRESDEC=r0], 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x0, 0x1, {{0x35, 0x4, 0x0, 0x3d, 0xd4, 0x65, 0x0, 0x7d, 0x4, 0x0, @remote, @local, {[@generic={0x7, 0x3, "d5"}, @timestamp_prespec={0x44, 0x4c, 0xe5, 0x3, 0x7, [{@broadcast}, {@multicast1, 0x5}, {@local, 0xac5}, {@multicast1, 0x2}, {@multicast2, 0x8}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010101, 0x8}]}, @ssrr={0x89, 0xb, 0x96, [@remote, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xe7, [@multicast1, @loopback, @broadcast, @private=0xa010101]}, @ssrr={0x89, 0x13, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x6, [{@local, 0x27c6}]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0x5, "f82e55"}, {0x5, 0x8, "3b902d1abaf8"}, {0x5, 0x10, "64a16864021dfb3e822c6904e302"}, {0x0, 0xa, "db81018475e75848"}]}]}}}}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xbb9ed39455de6864}, 0x2) 06:11:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r5, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8f683cf3a0f4c95a, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000050) 06:11:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0xb26, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="09ece6535341663b6932858fc4139630e47f23f049f9702166ddb4365f19e7459b179323aa0d2d65ff8944ac615b8f2f599c990000000000000000000000000000004788305cff74fbf538994f56eecd759c140a89218553dc773661e98859fd79fea5e0469223dc5c7735263728ed567f9e9f52168a848bf1af0ffa7e4e4239dd253a681a9b6c04425cd7904e4131254ebec46c7bb9e58d92e8fd88d9bbb07dec43ba0c3b58", @ANYRES16=r2], 0x4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 06:11:04 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x33, 0x0, @thr={&(0x7f00000001c0)="b50f1b05feef3f114a40e44266991068b554bbefe1db5204992c60f87e4aeb22482e690e24a684610cc0e30eca5facf2cfdfa9d15d64402be3accd7ab9add8bd86f1f3e99ee9d6e25df3e2f7f4046cfde2c78da67092630f12ca185e5ebc0c59aee6eab62eb12a69970848127b759ef6dfa8ff571ed5144b6807d9600b4f3351fb7c7a5900a34c0358a21f253b5e39966dd5a9471babdfff5a77b2", &(0x7f00000000c0)="010b3f3d164e56bf248f28cdf104359274bd7b954e9b3576772b32081a0755fa7e1363a5ce6c725e236d474e640220d427523dca987cb62e9da97c5d3d7ffd2aae3151571a7b5b93e7b8f456442822cb9d033d68b1b3d01c9ed1ed80486843f6a73ec655635d9238e187a4e543c3a16fc823b6709ab5816dfa525a981abeac94c95c86a6e2432cca944051b8de96a09f99d197cfeb91df2f04103070af86e573578e76e665877d11bccb132a2af7dbe1ef86a21fb4ac18fabaa400d75cb0843a3aba66e362dac2ba7fe7c8c0bb9a9c2edfdc0c4bea2a9d9da2f969"}}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x33, 0x0, @thr={&(0x7f00000001c0)="b50f1b05feef3f114a40e44266991068b554bbefe1db5204992c60f87e4aeb22482e690e24a684610cc0e30eca5facf2cfdfa9d15d64402be3accd7ab9add8bd86f1f3e99ee9d6e25df3e2f7f4046cfde2c78da67092630f12ca185e5ebc0c59aee6eab62eb12a69970848127b759ef6dfa8ff571ed5144b6807d9600b4f3351fb7c7a5900a34c0358a21f253b5e39966dd5a9471babdfff5a77b2", &(0x7f00000000c0)="010b3f3d164e56bf248f28cdf104359274bd7b954e9b3576772b32081a0755fa7e1363a5ce6c725e236d474e640220d427523dca987cb62e9da97c5d3d7ffd2aae3151571a7b5b93e7b8f456442822cb9d033d68b1b3d01c9ed1ed80486843f6a73ec655635d9238e187a4e543c3a16fc823b6709ab5816dfa525a981abeac94c95c86a6e2432cca944051b8de96a09f99d197cfeb91df2f04103070af86e573578e76e665877d11bccb132a2af7dbe1ef86a21fb4ac18fabaa400d75cb0843a3aba66e362dac2ba7fe7c8c0bb9a9c2edfdc0c4bea2a9d9da2f969"}}) (async) 06:11:04 executing program 2: r0 = mq_open(&(0x7f0000000000)='@/\x00', 0x40, 0x22, &(0x7f0000000040)={0x3, 0x3, 0x7fff, 0x2}) mq_timedsend(r0, 0x0, 0x0, 0x8000000000000000, 0x0) 06:11:04 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000d40)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xcb19}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48001}, 0x8841) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd0ba}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c080) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x486814d6f9826dca, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4721}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000740)={{&(0x7f00000006c0)={'Accelerator\x00', {&(0x7f0000000400)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {0x4}, {&(0x7f0000000340)=@adf_dec={@normal='NumberCyInstances\x00', {0x3f}}}}}, {&(0x7f0000000640)={'GENERAL\x00', {&(0x7f0000000580)=@adf_dec={@bank={'Bank', '2', 'CoreAffinity\x00'}, {0x6}, {&(0x7f00000004c0)=@adf_str={@format={'Dc', '3', 'BankNumber\x00'}, {"a3f193f9cd61c85d7034ea3072031e59e46a52358b7ba84884811c8d60ccc19d9a92c18c3de40f329c1e4dc6888b994734ef3324fab1c1ef825e613258aaff42"}}}}}}}}}, 0x3f}) syslog(0x3, &(0x7f0000000780)=""/158, 0x9e) (async, rerun: 32) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8814) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r1, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@cgroup=r1, r1, 0x26}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0x8041) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff00}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x14008000) (async, rerun: 64) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x29, 0x75, 0x3, 0x8, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x7, 0x2, 0x7ff}}) socket(0xa, 0x6, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="f4"], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) [ 134.829639] Bluetooth: hci1: Received unexpected HCI Event 00000000 06:11:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000380)=0x5, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}}, 0x20040080) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map=r2, 0xffffffffffffffff, 0x23}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="63c1abb77e5f8d46505e939c63f3004fabab74d3cd29e47dc32b143bd679687fb4252e352e9f8007532362957a9cd70b0cdb6d3c9d37f28b7334ac4eb39e232965a902cd2022874011fdc14927e48a4ef823", @ANYBLOB="4c8d819266ba8fe5f90476e256dfd32b56039405b831d175f8a98c661f245b5fced4c621945638ade284924b8dcb83cb3503d49fafadb5a86926c7c9564b4750132c98d4c1a6cd9316fe0dda66d1235b19914c6165616de95efffec0cadd60b6ce60e2ba6dcb5db2277382eb27", @ANYRES64=0x0, @ANYRESDEC=r0], 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x0, 0x1, {{0x35, 0x4, 0x0, 0x3d, 0xd4, 0x65, 0x0, 0x7d, 0x4, 0x0, @remote, @local, {[@generic={0x7, 0x3, "d5"}, @timestamp_prespec={0x44, 0x4c, 0xe5, 0x3, 0x7, [{@broadcast}, {@multicast1, 0x5}, {@local, 0xac5}, {@multicast1, 0x2}, {@multicast2, 0x8}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010101, 0x8}]}, @ssrr={0x89, 0xb, 0x96, [@remote, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xe7, [@multicast1, @loopback, @broadcast, @private=0xa010101]}, @ssrr={0x89, 0x13, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x6, [{@local, 0x27c6}]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0x5, "f82e55"}, {0x5, 0x8, "3b902d1abaf8"}, {0x5, 0x10, "64a16864021dfb3e822c6904e302"}, {0x0, 0xa, "db81018475e75848"}]}]}}}}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xbb9ed39455de6864}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) (async) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000380)=0x5, 0x4) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}}, 0x20040080) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map=r2, 0xffffffffffffffff, 0x23}, 0x10) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="63c1abb77e5f8d46505e939c63f3004fabab74d3cd29e47dc32b143bd679687fb4252e352e9f8007532362957a9cd70b0cdb6d3c9d37f28b7334ac4eb39e232965a902cd2022874011fdc14927e48a4ef823", @ANYBLOB="4c8d819266ba8fe5f90476e256dfd32b56039405b831d175f8a98c661f245b5fced4c621945638ade284924b8dcb83cb3503d49fafadb5a86926c7c9564b4750132c98d4c1a6cd9316fe0dda66d1235b19914c6165616de95efffec0cadd60b6ce60e2ba6dcb5db2277382eb27", @ANYRES64=0x0, @ANYRESDEC=r0], 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x0, 0x1, {{0x35, 0x4, 0x0, 0x3d, 0xd4, 0x65, 0x0, 0x7d, 0x4, 0x0, @remote, @local, {[@generic={0x7, 0x3, "d5"}, @timestamp_prespec={0x44, 0x4c, 0xe5, 0x3, 0x7, [{@broadcast}, {@multicast1, 0x5}, {@local, 0xac5}, {@multicast1, 0x2}, {@multicast2, 0x8}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010101, 0x8}]}, @ssrr={0x89, 0xb, 0x96, [@remote, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xe7, [@multicast1, @loopback, @broadcast, @private=0xa010101]}, @ssrr={0x89, 0x13, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x6, [{@local, 0x27c6}]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0x5, "f82e55"}, {0x5, 0x8, "3b902d1abaf8"}, {0x5, 0x10, "64a16864021dfb3e822c6904e302"}, {0x0, 0xa, "db81018475e75848"}]}]}}}}}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xbb9ed39455de6864}, 0x2) (async) 06:11:04 executing program 2: r0 = mq_open(&(0x7f0000000000)='@/\x00', 0x40, 0x22, &(0x7f0000000040)={0x3, 0x3, 0x7fff, 0x2}) mq_timedsend(r0, 0x0, 0x0, 0x8000000000000000, 0x0) mq_open(&(0x7f0000000000)='@/\x00', 0x40, 0x22, &(0x7f0000000040)={0x3, 0x3, 0x7fff, 0x2}) (async) mq_timedsend(r0, 0x0, 0x0, 0x8000000000000000, 0x0) (async) 06:11:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r5, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) 06:11:04 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x33, 0x0, @thr={&(0x7f00000001c0)="b50f1b05feef3f114a40e44266991068b554bbefe1db5204992c60f87e4aeb22482e690e24a684610cc0e30eca5facf2cfdfa9d15d64402be3accd7ab9add8bd86f1f3e99ee9d6e25df3e2f7f4046cfde2c78da67092630f12ca185e5ebc0c59aee6eab62eb12a69970848127b759ef6dfa8ff571ed5144b6807d9600b4f3351fb7c7a5900a34c0358a21f253b5e39966dd5a9471babdfff5a77b2", &(0x7f00000000c0)="010b3f3d164e56bf248f28cdf104359274bd7b954e9b3576772b32081a0755fa7e1363a5ce6c725e236d474e640220d427523dca987cb62e9da97c5d3d7ffd2aae3151571a7b5b93e7b8f456442822cb9d033d68b1b3d01c9ed1ed80486843f6a73ec655635d9238e187a4e543c3a16fc823b6709ab5816dfa525a981abeac94c95c86a6e2432cca944051b8de96a09f99d197cfeb91df2f04103070af86e573578e76e665877d11bccb132a2af7dbe1ef86a21fb4ac18fabaa400d75cb0843a3aba66e362dac2ba7fe7c8c0bb9a9c2edfdc0c4bea2a9d9da2f969"}}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x33, 0x0, @thr={&(0x7f00000001c0)="b50f1b05feef3f114a40e44266991068b554bbefe1db5204992c60f87e4aeb22482e690e24a684610cc0e30eca5facf2cfdfa9d15d64402be3accd7ab9add8bd86f1f3e99ee9d6e25df3e2f7f4046cfde2c78da67092630f12ca185e5ebc0c59aee6eab62eb12a69970848127b759ef6dfa8ff571ed5144b6807d9600b4f3351fb7c7a5900a34c0358a21f253b5e39966dd5a9471babdfff5a77b2", &(0x7f00000000c0)="010b3f3d164e56bf248f28cdf104359274bd7b954e9b3576772b32081a0755fa7e1363a5ce6c725e236d474e640220d427523dca987cb62e9da97c5d3d7ffd2aae3151571a7b5b93e7b8f456442822cb9d033d68b1b3d01c9ed1ed80486843f6a73ec655635d9238e187a4e543c3a16fc823b6709ab5816dfa525a981abeac94c95c86a6e2432cca944051b8de96a09f99d197cfeb91df2f04103070af86e573578e76e665877d11bccb132a2af7dbe1ef86a21fb4ac18fabaa400d75cb0843a3aba66e362dac2ba7fe7c8c0bb9a9c2edfdc0c4bea2a9d9da2f969"}}) (async) 06:11:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0xb26, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="09ece6535341663b6932858fc4139630e47f23f049f9702166ddb4365f19e7459b179323aa0d2d65ff8944ac615b8f2f599c990000000000000000000000000000004788305cff74fbf538994f56eecd759c140a89218553dc773661e98859fd79fea5e0469223dc5c7735263728ed567f9e9f52168a848bf1af0ffa7e4e4239dd253a681a9b6c04425cd7904e4131254ebec46c7bb9e58d92e8fd88d9bbb07dec43ba0c3b58", @ANYRES16=r2], 0x4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) [ 134.930440] Bluetooth: hci1: Received unexpected HCI Event 00000000 06:11:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r2, 0xffffffffffffffff, 0x11}, 0x10) (async) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000380)=0x5, 0x4) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}}, 0x20040080) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map=r2, 0xffffffffffffffff, 0x23}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="63c1abb77e5f8d46505e939c63f3004fabab74d3cd29e47dc32b143bd679687fb4252e352e9f8007532362957a9cd70b0cdb6d3c9d37f28b7334ac4eb39e232965a902cd2022874011fdc14927e48a4ef823", @ANYBLOB="4c8d819266ba8fe5f90476e256dfd32b56039405b831d175f8a98c661f245b5fced4c621945638ade284924b8dcb83cb3503d49fafadb5a86926c7c9564b4750132c98d4c1a6cd9316fe0dda66d1235b19914c6165616de95efffec0cadd60b6ce60e2ba6dcb5db2277382eb27", @ANYRES64=0x0, @ANYRESDEC=r0], 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x0, 0x1, {{0x35, 0x4, 0x0, 0x3d, 0xd4, 0x65, 0x0, 0x7d, 0x4, 0x0, @remote, @local, {[@generic={0x7, 0x3, "d5"}, @timestamp_prespec={0x44, 0x4c, 0xe5, 0x3, 0x7, [{@broadcast}, {@multicast1, 0x5}, {@local, 0xac5}, {@multicast1, 0x2}, {@multicast2, 0x8}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010101, 0x8}]}, @ssrr={0x89, 0xb, 0x96, [@remote, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xe7, [@multicast1, @loopback, @broadcast, @private=0xa010101]}, @ssrr={0x89, 0x13, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x6, [{@local, 0x27c6}]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0x5, "f82e55"}, {0x5, 0x8, "3b902d1abaf8"}, {0x5, 0x10, "64a16864021dfb3e822c6904e302"}, {0x0, 0xa, "db81018475e75848"}]}]}}}}}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xbb9ed39455de6864}, 0x2) 06:11:04 executing program 2: r0 = mq_open(&(0x7f0000000000)='@/\x00', 0x40, 0x22, &(0x7f0000000040)={0x3, 0x3, 0x7fff, 0x2}) mq_timedsend(r0, 0x0, 0x0, 0x8000000000000000, 0x0) 06:11:04 executing program 3: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2}) 06:11:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r5, 0xffffffffffffffff, 0x11}, 0x10) 06:11:04 executing program 5: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x4008818) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="2d1319dcc64f44da00800000afddace310b6d0ddf9fefe2d5823c55a6b25c118a4e699285e1792e6d00a0cda331f243abc2c38de61e3aac0207ec4923dfcf1340454c7576700a96f2527eda8f561f35452", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYBLOB="9329f2059c940a9e7f73a9e2a3cc1334bf11179b8d9e67bbecb23f7744e73adef4a0ab418ff15ae0c175d03fd3c6ee4eb4afcb76cfb1bcb96055d1f595511d8dc8e4ac15f2a5105838e4509b6b1c8bd99dd60474ed1688e3bb9fe3da883d62e5f86c32ed8a7cd7f244eaae452a74b14c0662af32", @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32], 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) [ 135.001091] Bluetooth: hci1: Received unexpected HCI Event 00000000 06:11:04 executing program 3: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2}) [ 135.160533] Bluetooth: hci1 command 0x0406 tx timeout 06:11:04 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000d40)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xcb19}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48001}, 0x8841) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd0ba}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c080) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x486814d6f9826dca, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4721}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000740)={{&(0x7f00000006c0)={'Accelerator\x00', {&(0x7f0000000400)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {0x4}, {&(0x7f0000000340)=@adf_dec={@normal='NumberCyInstances\x00', {0x3f}}}}}, {&(0x7f0000000640)={'GENERAL\x00', {&(0x7f0000000580)=@adf_dec={@bank={'Bank', '2', 'CoreAffinity\x00'}, {0x6}, {&(0x7f00000004c0)=@adf_str={@format={'Dc', '3', 'BankNumber\x00'}, {"a3f193f9cd61c85d7034ea3072031e59e46a52358b7ba84884811c8d60ccc19d9a92c18c3de40f329c1e4dc6888b994734ef3324fab1c1ef825e613258aaff42"}}}}}}}}}, 0x3f}) syslog(0x3, &(0x7f0000000780)=""/158, 0x9e) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8814) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r1, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@cgroup=r1, r1, 0x26}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0x8041) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff00}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x14008000) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x29, 0x75, 0x3, 0x8, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x7, 0x2, 0x7ff}}) socket(0xa, 0x6, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="f4"], 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000d40)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xcb19}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48001}, 0x8841) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd0ba}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c080) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x486814d6f9826dca, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4721}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000740)={{&(0x7f00000006c0)={'Accelerator\x00', {&(0x7f0000000400)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {0x4}, {&(0x7f0000000340)=@adf_dec={@normal='NumberCyInstances\x00', {0x3f}}}}}, {&(0x7f0000000640)={'GENERAL\x00', {&(0x7f0000000580)=@adf_dec={@bank={'Bank', '2', 'CoreAffinity\x00'}, {0x6}, {&(0x7f00000004c0)=@adf_str={@format={'Dc', '3', 'BankNumber\x00'}, {"a3f193f9cd61c85d7034ea3072031e59e46a52358b7ba84884811c8d60ccc19d9a92c18c3de40f329c1e4dc6888b994734ef3324fab1c1ef825e613258aaff42"}}}}}}}}}, 0x3f}) (async) syslog(0x3, &(0x7f0000000780)=""/158, 0x9e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8814) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r1, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@cgroup=r1, r1, 0x26}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0x8041) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff00}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x14008000) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x29, 0x75, 0x3, 0x8, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x7, 0x2, 0x7ff}}) (async) socket(0xa, 0x6, 0x4) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="f4"], 0x4) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) 06:11:04 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x39, 0x0, @thr={&(0x7f00000000c0)="a1f03652784d152f", &(0x7f0000000100)="18d208b5af1e909497c7097a6a7873062f959ae5d2f32e22b7ca3f005be4bd67e8ac05c9935a85508b9e7417fec67ddedccb0a324f65f6d89d7ee7700f7524562fcb41ff527608ac4f8abbf5"}}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x0, 0x81}, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x327802) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000000)={0x5, 0xafce, 0x699f4bda, 0x5, 0x8, 0xff, 0x1f, 0x0, 0x3, 0x2, 0x2, "fcc198174ff0001c86c66696ecbf3436fdff7f000000000000ad55942654276f"}) 06:11:04 executing program 5: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x4008818) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="2d1319dcc64f44da00800000afddace310b6d0ddf9fefe2d5823c55a6b25c118a4e699285e1792e6d00a0cda331f243abc2c38de61e3aac0207ec4923dfcf1340454c7576700a96f2527eda8f561f35452", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYBLOB="9329f2059c940a9e7f73a9e2a3cc1334bf11179b8d9e67bbecb23f7744e73adef4a0ab418ff15ae0c175d03fd3c6ee4eb4afcb76cfb1bcb96055d1f595511d8dc8e4ac15f2a5105838e4509b6b1c8bd99dd60474ed1688e3bb9fe3da883d62e5f86c32ed8a7cd7f244eaae452a74b14c0662af32", @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32], 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) 06:11:04 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x1f, 0x2}, 0x14) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r1 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/mnt\x00') 06:11:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 06:11:04 executing program 3: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2}) (async) 06:11:04 executing program 5: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x4008818) (async) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="2d1319dcc64f44da00800000afddace310b6d0ddf9fefe2d5823c55a6b25c118a4e699285e1792e6d00a0cda331f243abc2c38de61e3aac0207ec4923dfcf1340454c7576700a96f2527eda8f561f35452", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYBLOB="9329f2059c940a9e7f73a9e2a3cc1334bf11179b8d9e67bbecb23f7744e73adef4a0ab418ff15ae0c175d03fd3c6ee4eb4afcb76cfb1bcb96055d1f595511d8dc8e4ac15f2a5105838e4509b6b1c8bd99dd60474ed1688e3bb9fe3da883d62e5f86c32ed8a7cd7f244eaae452a74b14c0662af32", @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32], 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) 06:11:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) 06:11:04 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 06:11:04 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x1f, 0x2}, 0x14) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r1 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/mnt\x00') 06:11:04 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x39, 0x0, @thr={&(0x7f00000000c0)="a1f03652784d152f", &(0x7f0000000100)="18d208b5af1e909497c7097a6a7873062f959ae5d2f32e22b7ca3f005be4bd67e8ac05c9935a85508b9e7417fec67ddedccb0a324f65f6d89d7ee7700f7524562fcb41ff527608ac4f8abbf5"}}) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x0, 0x81}, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x327802) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000000)={0x5, 0xafce, 0x699f4bda, 0x5, 0x8, 0xff, 0x1f, 0x0, 0x3, 0x2, 0x2, "fcc198174ff0001c86c66696ecbf3436fdff7f000000000000ad55942654276f"}) 06:11:04 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 06:11:04 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1f, 0xc8}}}, 0x8) 06:11:04 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x9, 0x9, 0x4, 0x100, 0x64a4, {r1, r2/1000+10000}, {0x3, 0x0, 0x82, 0xe0, 0x20, 0x8, "b3eca4f9"}, 0x20, 0x4, {}, 0x7, 0x0, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x101, 0x8, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x0, 0x9, 0x5, 0x80, 0x9, "3f39c8ab"}, 0x3, 0x4, {}, 0x3, 0x0, r3}) ptrace(0x4208, 0x0) r4 = socket(0x1a, 0x24d42933255560e6, 0x7fffffff) r5 = getpgrp(0xffffffffffffffff) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f0000000400)={0x0, {0x401, 0x8000}}) clock_gettime(0x0, &(0x7f0000000280)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r5, 0x7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETNSID={0x3c, 0x5a, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2e06a4b6fad54635) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r7, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004012}, 0x4000040) 06:11:04 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x39, 0x0, @thr={&(0x7f00000000c0)="a1f03652784d152f", &(0x7f0000000100)="18d208b5af1e909497c7097a6a7873062f959ae5d2f32e22b7ca3f005be4bd67e8ac05c9935a85508b9e7417fec67ddedccb0a324f65f6d89d7ee7700f7524562fcb41ff527608ac4f8abbf5"}}) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x0, 0x81}, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x327802) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000000)={0x5, 0xafce, 0x699f4bda, 0x5, 0x8, 0xff, 0x1f, 0x0, 0x3, 0x2, 0x2, "fcc198174ff0001c86c66696ecbf3436fdff7f000000000000ad55942654276f"}) 06:11:04 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) 06:11:04 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x1f, 0x2}, 0x14) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) r1 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/mnt\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x1f, 0x2}, 0x14) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) getpgrp(0xffffffffffffffff) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/mnt\x00') (async) 06:11:04 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 06:11:04 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x9}) rt_sigqueueinfo(r0, 0x33, &(0x7f0000000040)={0x13, 0x7fffffff, 0xbae3}) 06:11:04 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000040)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_timedsend(r0, &(0x7f0000000000)="93d89596d513ee2ecec2cb2a25", 0xd, 0x1, 0x0) 06:11:04 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1f, 0xc8}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1f, 0xc8}}}, 0x8) (async) 06:11:04 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x9, 0x9, 0x4, 0x100, 0x64a4, {r1, r2/1000+10000}, {0x3, 0x0, 0x82, 0xe0, 0x20, 0x8, "b3eca4f9"}, 0x20, 0x4, {}, 0x7, 0x0, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x101, 0x8, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x0, 0x9, 0x5, 0x80, 0x9, "3f39c8ab"}, 0x3, 0x4, {}, 0x3, 0x0, r3}) (async) ptrace(0x4208, 0x0) r4 = socket(0x1a, 0x24d42933255560e6, 0x7fffffff) (async) r5 = getpgrp(0xffffffffffffffff) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f0000000400)={0x0, {0x401, 0x8000}}) clock_gettime(0x0, &(0x7f0000000280)) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r5, 0x7, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETNSID={0x3c, 0x5a, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2e06a4b6fad54635) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r7, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004012}, 0x4000040) 06:11:05 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) [ 135.495100] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, 0x0, 0x0) 06:11:05 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 06:11:05 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x9}) rt_sigqueueinfo(r0, 0x33, &(0x7f0000000040)={0x13, 0x7fffffff, 0xbae3}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) getpgrp(0xffffffffffffffff) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x9}) (async) rt_sigqueueinfo(r0, 0x33, &(0x7f0000000040)={0x13, 0x7fffffff, 0xbae3}) (async) 06:11:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1f, 0xc8}}}, 0x8) 06:11:05 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x9, 0x9, 0x4, 0x100, 0x64a4, {r1, r2/1000+10000}, {0x3, 0x0, 0x82, 0xe0, 0x20, 0x8, "b3eca4f9"}, 0x20, 0x4, {}, 0x7, 0x0, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x101, 0x8, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x0, 0x9, 0x5, 0x80, 0x9, "3f39c8ab"}, 0x3, 0x4, {}, 0x3, 0x0, r3}) (async) ptrace(0x4208, 0x0) (async) r4 = socket(0x1a, 0x24d42933255560e6, 0x7fffffff) (async) r5 = getpgrp(0xffffffffffffffff) (async) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f0000000400)={0x0, {0x401, 0x8000}}) clock_gettime(0x0, &(0x7f0000000280)) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r5, 0x7, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETNSID={0x3c, 0x5a, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2e06a4b6fad54635) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r7, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004012}, 0x4000040) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 135.563950] Bluetooth: hci2 SCO packet for unknown connection handle 0 [ 135.571943] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:05 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) 06:11:05 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000040)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_timedsend(r0, &(0x7f0000000000)="93d89596d513ee2ecec2cb2a25", 0xd, 0x1, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x6, &(0x7f0000000040)) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mq_timedsend(r0, &(0x7f0000000000)="93d89596d513ee2ecec2cb2a25", 0xd, 0x1, 0x0) (async) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:05 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32], 0x4) 06:11:05 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) 06:11:05 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async, rerun: 64) r0 = getpgrp(0xffffffffffffffff) (rerun: 64) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x9}) (async) rt_sigqueueinfo(r0, 0x33, &(0x7f0000000040)={0x13, 0x7fffffff, 0xbae3}) 06:11:05 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="034d2715c7cc3f98058baf5d3fc6bf1e55e845e82322837e3cf3ab225711f51fa2fafded3a60c8dce9c40a6205b315bac533134a71efb47ad8ae6c10"], 0x4) [ 135.668405] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:05 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000040)) (async, rerun: 32) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async, rerun: 32) mq_timedsend(r0, &(0x7f0000000000)="93d89596d513ee2ecec2cb2a25", 0xd, 0x1, 0x0) (rerun: 32) 06:11:05 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32], 0x4) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:05 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:11:05 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="034d2715c7cc3f98058baf5d3fc6bf1e55e845e82322837e3cf3ab225711f51fa2fafded3a60c8dce9c40a6205b315bac533134a71efb47ad8ae6c10"], 0x4) 06:11:05 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) [ 135.758147] Bluetooth: hci2 SCO packet for unknown connection handle 10061 06:11:05 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_timedreceive(r0, &(0x7f0000000000)=""/127, 0x7f, 0x80, &(0x7f0000000080)={0x0, 0x3938700}) clock_gettime(0x4, &(0x7f00000000c0)) 06:11:05 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32], 0x4) 06:11:05 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:11:05 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) (async) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:05 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="034d2715c7cc3f98058baf5d3fc6bf1e55e845e82322837e3cf3ab225711f51fa2fafded3a60c8dce9c40a6205b315bac533134a71efb47ad8ae6c10"], 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="034d2715c7cc3f98058baf5d3fc6bf1e55e845e82322837e3cf3ab225711f51fa2fafded3a60c8dce9c40a6205b315bac533134a71efb47ad8ae6c10"], 0x4) (async) 06:11:05 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mq_timedreceive(r0, &(0x7f0000000000)=""/127, 0x7f, 0x80, &(0x7f0000000080)={0x0, 0x3938700}) clock_gettime(0x4, &(0x7f00000000c0)) [ 135.849911] Bluetooth: hci2 SCO packet for unknown connection handle 10061 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff8, 0x200) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x54080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES64=r5, @ANYRESDEC=r1], 0x4) 06:11:05 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 06:11:05 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) 06:11:05 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) mq_timedreceive(r0, &(0x7f0000000000)=""/127, 0x7f, 0x80, &(0x7f0000000080)={0x0, 0x3938700}) clock_gettime(0x4, &(0x7f00000000c0)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) mq_timedreceive(r0, &(0x7f0000000000)=""/127, 0x7f, 0x80, &(0x7f0000000080)={0x0, 0x3938700}) (async) clock_gettime(0x4, &(0x7f00000000c0)) (async) 06:11:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x4) [ 135.909959] Bluetooth: hci2 SCO packet for unknown connection handle 10061 [ 135.949583] Bluetooth: hci2 SCO packet for unknown connection handle 10061 06:11:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff8, 0x200) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x54080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES64=r5, @ANYRESDEC=r1], 0x4) 06:11:05 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fscache_page\x00'}, 0x10) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = getpgrp(0x0) mq_notify(r0, &(0x7f0000000080)={0x0, 0x5, 0x2, @tid=r1}) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0xffffffffffffff67, 0x7, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:05 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) 06:11:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x4) (async) 06:11:05 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) userfaultfd(0xd34a153848753969) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:05 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fscache_page\x00'}, 0x10) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) r1 = getpgrp(0x0) mq_notify(r0, &(0x7f0000000080)={0x0, 0x5, 0x2, @tid=r1}) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0xffffffffffffff67, 0x7, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 06:11:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff8, 0x200) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x8004) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@map=r4, 0xffffffffffffffff, 0x11}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5a}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x54080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES64=r5, @ANYRESDEC=r1], 0x4) 06:11:05 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 06:11:05 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) userfaultfd(0xd34a153848753969) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) userfaultfd(0xd34a153848753969) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 06:11:05 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x4) (async) 06:11:05 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fscache_page\x00'}, 0x10) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async, rerun: 32) r1 = getpgrp(0x0) (rerun: 32) mq_notify(r0, &(0x7f0000000080)={0x0, 0x5, 0x2, @tid=r1}) (async, rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0xffffffffffffff67, 0x7, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 06:11:05 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/19, 0x13, 0x5, &(0x7f0000000080)={0x0, 0x989680}) socket$inet(0x2, 0xa, 0xfffffff9) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x101) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000000c0)={{0x80000000, 0x0, 0x7, [0x3, 0x8]}, {0x80000000, 0x0, 0x6, [0x9, 0xfffff967]}, 0x4, [0x4, 0x2]}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)={0x2}) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:05 executing program 1: remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:05 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x4) 06:11:05 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) userfaultfd(0xd34a153848753969) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) userfaultfd(0xd34a153848753969) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) [ 136.211489] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 06:11:05 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/19, 0x13, 0x5, &(0x7f0000000080)={0x0, 0x989680}) socket$inet(0x2, 0xa, 0xfffffff9) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x101) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000000c0)={{0x80000000, 0x0, 0x7, [0x3, 0x8]}, {0x80000000, 0x0, 0x6, [0x9, 0xfffff967]}, 0x4, [0x4, 0x2]}) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)={0x2}) 06:11:05 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x2e}) 06:11:05 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="c8050da30c0127f8718614ed834bc52633f611d6cab3336dfd53213f30a34b48133b7bfabde5dfe3d9f222cc280400d21458b9605138b731040aab041919495b48ace19ef09c93cda60482aa4bb176673ea412e9fd02232c56b934679e46d82997ae8ec6dfbda89083588f406ae49c36930cde6d2e2dc85dca23c1a5015cd5c8f2320b0a80f7a5fed5b183f2cb91b550987fbc59e2ae265fc6e47b600d3f987967dfecf4e6cf8dbe1c9a05ba97debc854c72826213ab937a0a98e4b6933fa944b41d86476edb29e723e5892a08006611ddd0972ada392a83a5799dbf954e5e1ae411c2f3ed30b4608ff970c9f14b895be1e1a6d8997498c8aef64fc43f7203b12ca51b15b4d41f14fa0ebe"], 0x4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x4) (async) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) [ 136.250619] mmap: syz-executor.1 (27792) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 06:11:05 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/19, 0x13, 0x5, &(0x7f0000000080)={0x0, 0x989680}) socket$inet(0x2, 0xa, 0xfffffff9) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x101) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000000c0)={{0x80000000, 0x0, 0x7, [0x3, 0x8]}, {0x80000000, 0x0, 0x6, [0x9, 0xfffff967]}, 0x4, [0x4, 0x2]}) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)={0x2}) 06:11:05 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x4) 06:11:05 executing program 1: remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:05 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x2e}) 06:11:05 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x10001, 0x82100) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) r2 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x4}) mq_timedreceive(r0, &(0x7f0000000000)=""/234, 0xea, 0x5, 0x0) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:05 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x2e}) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x2e}) (async) 06:11:05 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x10001, 0x82100) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) r2 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x4}) mq_timedreceive(r0, &(0x7f0000000000)=""/234, 0xea, 0x5, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x10001, 0x82100) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) userfaultfd(0x80800) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x4}) (async) mq_timedreceive(r0, &(0x7f0000000000)=""/234, 0xea, 0x5, 0x0) (async) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:05 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800100080000000000000000900000018000000ff070000000000000400000085100000f8ffffff95000000004f9900183700000100000000000000000000009500a217cc4c37d30000000000b80aa9a995c051840af3e8ef82a9a0c5b48e14548f75861173df5919f45361b73e7748d1e7b4dc4b4a5667149622898f75266c6fe90c724a4610300edad40865fb8487647598a2aeb70cf5ef030467f2d880d51aa49af79696db0fe38feb0259356837021cf3e2b2253905f51fcd6f0f43537e0e8c087c08a45fc99bae72e8fd12daa3975f707b0f95857ef6cd8eb2054b0aa98d0053359971b84e19709a6935d238a85d43bfc610e9c3a2a7b4"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x6c, &(0x7f0000000100)=""/108, 0x40f00, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x1, 0x80000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x90000, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r6) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1d, 0x0, 0x3f, 0x3ff, 0x289, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @ldst={0x1, 0x2, 0x3, 0xa, 0x8, 0x0, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x19, &(0x7f00000006c0)=""/25, 0x41100, 0x3, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xc, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, r3, r4, r5, r6, 0x1, r7, r8]}, 0x80) 06:11:05 executing program 1: remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x0, 0x1) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:05 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="db80e0ffffffffff850000001f586f0cbc63080004000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x3b, &(0x7f00000000c0)=""/59, 0x41100, 0xf, '\x00', 0x0, 0x4, r0, 0x8, &(0x7f0000000100)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x10, 0xc000, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r0, r0]}, 0x80) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) r3 = socket(0xb, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000440)={r6, r1, 0xfd67}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/134, 0x86, 0x0, &(0x7f0000000d40)=""/4096, 0x1000}, &(0x7f0000000340)=0x40) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x8, 0x3, 0x4, 0x30, 0x10}, @alu={0x4, 0x0, 0x4, 0x7, 0x5, 0x100, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x4, 0x9, 0x4, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000500)='syzkaller\x00', 0xfffffff9, 0xf2, &(0x7f0000000540)=""/242, 0x41100, 0x1c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r6, r0, r7]}, 0x80) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r8) syz_open_dev$vcsn(&(0x7f0000000780), 0x7, 0x80202) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000240)=r2) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:05 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x10001, 0x82100) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r1) (async) r2 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x4}) mq_timedreceive(r0, &(0x7f0000000000)=""/234, 0xea, 0x5, 0x0) 06:11:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r0], 0x4) 06:11:05 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x6c, &(0x7f0000000100)=""/108, 0x40f00, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x1, 0x80000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x90000, 0x0) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r6) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1d, 0x0, 0x3f, 0x3ff, 0x289, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @ldst={0x1, 0x2, 0x3, 0xa, 0x8, 0x0, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x19, &(0x7f00000006c0)=""/25, 0x41100, 0x3, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xc, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, r3, r4, r5, r6, 0x1, r7, r8]}, 0x80) 06:11:05 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:06 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140)="fa7b263ddc44f6cb963cd6f6cfe3ed94a6eecfd572532771d67b9c0f07c09e48eb624fcbdcca959d6043166d78068f0ce0965a09c373457927df7f47fd84c8422894f6723e33fa4345e4f4fecbfd17cb49b7772c486e6ffa860a6baaf6cd74d9989b9448b87c15ad773d38b4d189c671b3d51b560ea76c7849", 0x79, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r1, 0x0, r0, 0x800}) mq_timedsend(r0, &(0x7f0000000000)="9283cd126e1049cc766c5ec007265ee00ccbfbf46d6ea71b3daf52c36540ca4b4f11808920e75edf5b0ca569cadc905090c41077d8ab37c049ecd81091633868f0a05f2a6ee74f", 0xffffffffffffff70, 0xfffffffffffffffe, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x80400, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) [ 136.483946] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:06 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="db80e0ffffffffff850000001f586f0cbc63080004000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x3b, &(0x7f00000000c0)=""/59, 0x41100, 0xf, '\x00', 0x0, 0x4, r0, 0x8, &(0x7f0000000100)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x10, 0xc000, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r0, r0]}, 0x80) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) r3 = socket(0xb, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000440)={r6, r1, 0xfd67}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/134, 0x86, 0x0, &(0x7f0000000d40)=""/4096, 0x1000}, &(0x7f0000000340)=0x40) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x8, 0x3, 0x4, 0x30, 0x10}, @alu={0x4, 0x0, 0x4, 0x7, 0x5, 0x100, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x4, 0x9, 0x4, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000500)='syzkaller\x00', 0xfffffff9, 0xf2, &(0x7f0000000540)=""/242, 0x41100, 0x1c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r6, r0, r7]}, 0x80) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r8) syz_open_dev$vcsn(&(0x7f0000000780), 0x7, 0x80202) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000240)=r2) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="db80e0ffffffffff850000001f586f0cbc63080004000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x3b, &(0x7f00000000c0)=""/59, 0x41100, 0xf, '\x00', 0x0, 0x4, r0, 0x8, &(0x7f0000000100)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x10, 0xc000, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r0, r0]}, 0x80) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) socket(0xb, 0x0, 0x20) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) (async) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000440)={r6, r1, 0xfd67}) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/134, 0x86, 0x0, &(0x7f0000000d40)=""/4096, 0x1000}, &(0x7f0000000340)=0x40) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x8, 0x3, 0x4, 0x30, 0x10}, @alu={0x4, 0x0, 0x4, 0x7, 0x5, 0x100, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x4, 0x9, 0x4, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000500)='syzkaller\x00', 0xfffffff9, 0xf2, &(0x7f0000000540)=""/242, 0x41100, 0x1c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r6, r0, r7]}, 0x80) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r8) (async) syz_open_dev$vcsn(&(0x7f0000000780), 0x7, 0x80202) (async) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000240)=r2) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) (async) 06:11:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="6bc1d14df686990ce09176be45c0ca56f4cc6f6d65e262fd9ade7262ac27a06b6e402a37a8a5c96d0421c2bdab0d6b296f055185da592be0fd171bbe69dc0ddd3f2f927df99f16d15bcefb2264dda03fdeed2f161f4ac41c73d72cc99f57fef2c3166710c9733fdad4aa2a2d8886756c593ff89fbbcdc0a7191813b20e7ec16d271105d0c1b2efb3ec6058876c86bab91b30e5763948b701d39f20582bae5e92a8e1fd7c0fbcd0c612a7f73e6de46256306f7366a78a25cd134d8b50c81d0871badb67bc4f9bc3d342ff75f4a971b6b5bacf", &(0x7f0000000140)=@udp6=r1, 0x2}, 0x20) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair(0x26, 0x2, 0x7, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) clock_gettime(0x0, &(0x7f0000000000)) 06:11:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r0], 0x4) 06:11:06 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16], 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) 06:11:06 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140)="fa7b263ddc44f6cb963cd6f6cfe3ed94a6eecfd572532771d67b9c0f07c09e48eb624fcbdcca959d6043166d78068f0ce0965a09c373457927df7f47fd84c8422894f6723e33fa4345e4f4fecbfd17cb49b7772c486e6ffa860a6baaf6cd74d9989b9448b87c15ad773d38b4d189c671b3d51b560ea76c7849", 0x79, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r1, 0x0, r0, 0x800}) mq_timedsend(r0, &(0x7f0000000000)="9283cd126e1049cc766c5ec007265ee00ccbfbf46d6ea71b3daf52c36540ca4b4f11808920e75edf5b0ca569cadc905090c41077d8ab37c049ecd81091633868f0a05f2a6ee74f", 0xffffffffffffff70, 0xfffffffffffffffe, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x80400, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140)="fa7b263ddc44f6cb963cd6f6cfe3ed94a6eecfd572532771d67b9c0f07c09e48eb624fcbdcca959d6043166d78068f0ce0965a09c373457927df7f47fd84c8422894f6723e33fa4345e4f4fecbfd17cb49b7772c486e6ffa860a6baaf6cd74d9989b9448b87c15ad773d38b4d189c671b3d51b560ea76c7849", 0x79, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r1, 0x0, r0, 0x800}) (async) mq_timedsend(r0, &(0x7f0000000000)="9283cd126e1049cc766c5ec007265ee00ccbfbf46d6ea71b3daf52c36540ca4b4f11808920e75edf5b0ca569cadc905090c41077d8ab37c049ecd81091633868f0a05f2a6ee74f", 0xffffffffffffff70, 0xfffffffffffffffe, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x80400, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) (async) 06:11:06 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800100080000000000000000900000018000000ff070000000000000400000085100000f8ffffff95000000004f9900183700000100000000000000000000009500a217cc4c37d30000000000b80aa9a995c051840af3e8ef82a9a0c5b48e14548f75861173df5919f45361b73e7748d1e7b4dc4b4a5667149622898f75266c6fe90c724a4610300edad40865fb8487647598a2aeb70cf5ef030467f2d880d51aa49af79696db0fe38feb0259356837021cf3e2b2253905f51fcd6f0f43537e0e8c087c08a45fc99bae72e8fd12daa3975f707b0f95857ef6cd8eb2054b0aa98d0053359971b84e19709a6935d238a85d43bfc610e9c3a2a7b4"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x6c, &(0x7f0000000100)=""/108, 0x40f00, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x1, 0x80000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x90000, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r5) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r6) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1d, 0x0, 0x3f, 0x3ff, 0x289, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @ldst={0x1, 0x2, 0x3, 0xa, 0x8, 0x0, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x19, &(0x7f00000006c0)=""/25, 0x41100, 0x3, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xc, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, r3, r4, r5, r6, 0x1, r7, r8]}, 0x80) 06:11:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="6bc1d14df686990ce09176be45c0ca56f4cc6f6d65e262fd9ade7262ac27a06b6e402a37a8a5c96d0421c2bdab0d6b296f055185da592be0fd171bbe69dc0ddd3f2f927df99f16d15bcefb2264dda03fdeed2f161f4ac41c73d72cc99f57fef2c3166710c9733fdad4aa2a2d8886756c593ff89fbbcdc0a7191813b20e7ec16d271105d0c1b2efb3ec6058876c86bab91b30e5763948b701d39f20582bae5e92a8e1fd7c0fbcd0c612a7f73e6de46256306f7366a78a25cd134d8b50c81d0871badb67bc4f9bc3d342ff75f4a971b6b5bacf", &(0x7f0000000140)=@udp6=r1, 0x2}, 0x20) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair(0x26, 0x2, 0x7, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) clock_gettime(0x0, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="6bc1d14df686990ce09176be45c0ca56f4cc6f6d65e262fd9ade7262ac27a06b6e402a37a8a5c96d0421c2bdab0d6b296f055185da592be0fd171bbe69dc0ddd3f2f927df99f16d15bcefb2264dda03fdeed2f161f4ac41c73d72cc99f57fef2c3166710c9733fdad4aa2a2d8886756c593ff89fbbcdc0a7191813b20e7ec16d271105d0c1b2efb3ec6058876c86bab91b30e5763948b701d39f20582bae5e92a8e1fd7c0fbcd0c612a7f73e6de46256306f7366a78a25cd134d8b50c81d0871badb67bc4f9bc3d342ff75f4a971b6b5bacf", &(0x7f0000000140)=@udp6=r1, 0x2}, 0x20) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) socketpair(0x26, 0x2, 0x7, &(0x7f0000000240)) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) [ 136.581860] Bluetooth: hci2 SCO packet for unknown connection handle 0 06:11:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r0], 0x4) 06:11:06 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="db80e0ffffffffff850000001f586f0cbc63080004000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x3b, &(0x7f00000000c0)=""/59, 0x41100, 0xf, '\x00', 0x0, 0x4, r0, 0x8, &(0x7f0000000100)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x10, 0xc000, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r0, r0]}, 0x80) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) r3 = socket(0xb, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000440)={r6, r1, 0xfd67}) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/134, 0x86, 0x0, &(0x7f0000000d40)=""/4096, 0x1000}, &(0x7f0000000340)=0x40) (async) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x8, 0x3, 0x4, 0x30, 0x10}, @alu={0x4, 0x0, 0x4, 0x7, 0x5, 0x100, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x4, 0x9, 0x4, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000500)='syzkaller\x00', 0xfffffff9, 0xf2, &(0x7f0000000540)=""/242, 0x41100, 0x1c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r6, r0, r7]}, 0x80) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r8) (async) syz_open_dev$vcsn(&(0x7f0000000780), 0x7, 0x80202) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000240)=r2) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) 06:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250600000008000c00000000000c001600000100000000000008001800ac1414bb08001700", @ANYRES32, @ANYBLOB="05000700020000001400080076657468315f746f5f626faf64000000050004090000000004000d000000000014f9c6c9b631a58cedd67eb17b970ee2016a216352e64695b476a4d013944b00a0d8c0874e93080697cb0f696609c5effa4766b231c1e3584c7d052277f0fe510368518cb0aebcf8d43e57da34bdbf5e1a7ad551902c7167f661374504fffb700292de15369dd68b0e4be41f38b72354358b853600000000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) [ 136.679366] ------------[ cut here ]------------ [ 136.684285] WARNING: CPU: 0 PID: 8034 at net/bluetooth/hci_conn.c:404 hci_conn_timeout+0x1ef/0x3f0 [ 136.693379] Kernel panic - not syncing: panic_on_warn set ... [ 136.693379] [ 136.700737] CPU: 0 PID: 8034 Comm: kworker/u5:7 Not tainted 4.14.270-syzkaller #0 [ 136.708349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.717705] Workqueue: hci1 hci_conn_timeout [ 136.722109] Call Trace: [ 136.724701] dump_stack+0x1b2/0x281 [ 136.728328] panic+0x1f9/0x42d [ 136.731519] ? add_taint.cold+0x16/0x16 [ 136.735492] ? hci_conn_timeout+0x1ef/0x3f0 [ 136.739816] ? hci_conn_timeout+0x1ef/0x3f0 [ 136.744136] __warn.cold+0x20/0x44 [ 136.747675] ? ist_end_non_atomic+0x10/0x10 [ 136.751995] ? hci_conn_timeout+0x1ef/0x3f0 [ 136.756309] report_bug+0x208/0x250 [ 136.759936] do_error_trap+0x195/0x2d0 [ 136.763820] ? math_error+0x2d0/0x2d0 [ 136.767615] ? debug_object_deactivate+0x1da/0x2e0 [ 136.772539] ? trace_hardirqs_on+0x10/0x10 06:11:06 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140)="fa7b263ddc44f6cb963cd6f6cfe3ed94a6eecfd572532771d67b9c0f07c09e48eb624fcbdcca959d6043166d78068f0ce0965a09c373457927df7f47fd84c8422894f6723e33fa4345e4f4fecbfd17cb49b7772c486e6ffa860a6baaf6cd74d9989b9448b87c15ad773d38b4d189c671b3d51b560ea76c7849", 0x79, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r1, 0x0, r0, 0x800}) mq_timedsend(r0, &(0x7f0000000000)="9283cd126e1049cc766c5ec007265ee00ccbfbf46d6ea71b3daf52c36540ca4b4f11808920e75edf5b0ca569cadc905090c41077d8ab37c049ecd81091633868f0a05f2a6ee74f", 0xffffffffffffff70, 0xfffffffffffffffe, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x80400, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) mq_notify(0xffffffffffffffff, &(0x7f00000015c0)) (async) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140)="fa7b263ddc44f6cb963cd6f6cfe3ed94a6eecfd572532771d67b9c0f07c09e48eb624fcbdcca959d6043166d78068f0ce0965a09c373457927df7f47fd84c8422894f6723e33fa4345e4f4fecbfd17cb49b7772c486e6ffa860a6baaf6cd74d9989b9448b87c15ad773d38b4d189c671b3d51b560ea76c7849", 0x79, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r1, 0x0, r0, 0x800}) (async) mq_timedsend(r0, &(0x7f0000000000)="9283cd126e1049cc766c5ec007265ee00ccbfbf46d6ea71b3daf52c36540ca4b4f11808920e75edf5b0ca569cadc905090c41077d8ab37c049ecd81091633868f0a05f2a6ee74f", 0xffffffffffffff70, 0xfffffffffffffffe, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x80400, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) (async) 06:11:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="6bc1d14df686990ce09176be45c0ca56f4cc6f6d65e262fd9ade7262ac27a06b6e402a37a8a5c96d0421c2bdab0d6b296f055185da592be0fd171bbe69dc0ddd3f2f927df99f16d15bcefb2264dda03fdeed2f161f4ac41c73d72cc99f57fef2c3166710c9733fdad4aa2a2d8886756c593ff89fbbcdc0a7191813b20e7ec16d271105d0c1b2efb3ec6058876c86bab91b30e5763948b701d39f20582bae5e92a8e1fd7c0fbcd0c612a7f73e6de46256306f7366a78a25cd134d8b50c81d0871badb67bc4f9bc3d342ff75f4a971b6b5bacf", &(0x7f0000000140)=@udp6=r1, 0x2}, 0x20) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) socketpair(0x26, 0x2, 0x7, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) clock_gettime(0x0, &(0x7f0000000000)) [ 136.776764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 136.781584] invalid_op+0x1b/0x40 [ 136.785022] RIP: 0010:hci_conn_timeout+0x1ef/0x3f0 [ 136.789935] RSP: 0018:ffff8880b1847d30 EFLAGS: 00010297 [ 136.795289] RAX: ffff8880b29381c0 RBX: ffff888095190ca0 RCX: 0000000000000000 [ 136.802547] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff888095190b90 [ 136.809798] RBP: ffff888095190ca0 R08: 0000000000000001 R09: ffffffff8ae18cb0 [ 136.817075] R10: 0000000000146731 R11: ffff8880b29381c0 R12: ffff888095190b80 [ 136.824324] R13: 00000000ffffffff R14: ffff8880b29f6880 R15: ffff8880a4b45400 [ 136.831616] process_one_work+0x793/0x14a0 [ 136.835836] ? work_busy+0x320/0x320 [ 136.839529] ? worker_thread+0x158/0xff0 [ 136.843571] ? _raw_spin_unlock_irq+0x24/0x80 [ 136.848048] worker_thread+0x5cc/0xff0 [ 136.851918] ? rescuer_thread+0xc80/0xc80 [ 136.856045] kthread+0x30d/0x420 [ 136.859389] ? kthread_create_on_node+0xd0/0xd0 [ 136.864037] ret_from_fork+0x24/0x30 [ 136.868050] Kernel Offset: disabled [ 136.871712] Rebooting in 86400 seconds..