name failslab, interval 1, probability 0, space 0, times 0 [ 1263.335996] CPU: 1 PID: 31245 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1263.343918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1263.353201] FAULT_INJECTION: forcing a failure. [ 1263.353201] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.353293] Call Trace: [ 1263.367075] dump_stack+0x1b2/0x281 [ 1263.370731] should_fail.cold+0x10a/0x149 [ 1263.374901] should_failslab+0xd6/0x130 [ 1263.378892] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1263.383574] dccp_feat_entry_new+0x173/0x350 [ 1263.387997] __feat_register_sp+0x1c9/0x490 [ 1263.392336] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1263.396932] ? _raw_spin_unlock+0x31/0x40 [ 1263.401159] dccp_feat_init+0x266/0x6b0 [ 1263.405148] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1263.410260] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1263.415307] ? init_timer_key+0x68/0x300 [ 1263.419374] ? __lockdep_init_map+0x100/0x560 [ 1263.423884] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1263.429695] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1263.435517] ? compat_dccp_setsockopt+0x70/0x70 [ 1263.440228] dccp_init_sock+0x2f1/0x3c0 [ 1263.444218] dccp_v6_init_sock+0x1a/0x80 [ 1263.448394] ? dccp_v6_rcv+0x1590/0x1590 [ 1263.452654] inet6_create+0x8f1/0xe20 [ 1263.456469] __sock_create+0x303/0x620 [ 1263.460376] SyS_socketpair+0xdf/0x480 [ 1263.464276] ? SyS_socket+0x1b0/0x1b0 [ 1263.468086] ? SyS_read+0x210/0x210 [ 1263.471727] ? __do_page_fault+0x159/0xad0 [ 1263.475970] ? do_syscall_64+0x4c/0x640 [ 1263.479948] ? SyS_socket+0x1b0/0x1b0 [ 1263.483759] do_syscall_64+0x1d5/0x640 [ 1263.487666] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1263.492850] RIP: 0033:0x7fbc383ab0f9 [ 1263.496556] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1263.504265] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1263.511538] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1263.518821] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1263.526237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.533526] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 [ 1263.546264] CPU: 0 PID: 31249 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 [ 1263.554180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1263.563542] Call Trace: [ 1263.566237] dump_stack+0x1b2/0x281 [ 1263.569885] should_fail.cold+0x10a/0x149 [ 1263.574051] should_failslab+0xd6/0x130 [ 1263.578082] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1263.583205] __kmalloc_node_track_caller+0x38/0x70 [ 1263.586532] FAULT_INJECTION: forcing a failure. [ 1263.586532] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.588144] __alloc_skb+0x96/0x510 [ 1263.588163] netlink_ack+0x216/0x9a0 [ 1263.588177] ? netlink_sendmsg+0xbc0/0xbc0 [ 1263.588197] netlink_rcv_skb+0x2c5/0x390 [ 1263.614981] ? genl_family_rcv_msg+0xb20/0xb20 [ 1263.619565] ? netlink_ack+0x9a0/0x9a0 [ 1263.623523] ? lock_acquire+0x170/0x3f0 [ 1263.627503] genl_rcv+0x24/0x40 [ 1263.630781] netlink_unicast+0x437/0x610 [ 1263.634841] ? netlink_sendskb+0xd0/0xd0 [ 1263.638903] ? __check_object_size+0x179/0x230 [ 1263.643483] netlink_sendmsg+0x651/0xbc0 [ 1263.647555] ? nlmsg_notify+0x1b0/0x1b0 [ 1263.651529] ? kernel_recvmsg+0x210/0x210 [ 1263.655698] ? security_socket_sendmsg+0x83/0xb0 [ 1263.660455] ? nlmsg_notify+0x1b0/0x1b0 [ 1263.664441] sock_sendmsg+0xb5/0x100 [ 1263.668156] ___sys_sendmsg+0x6c8/0x800 [ 1263.672127] ? get_pid_task+0x91/0x130 [ 1263.676019] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1263.681040] ? lock_downgrade+0x740/0x740 [ 1263.685198] ? __fget+0x23e/0x3e0 [ 1263.688661] ? lock_acquire+0x170/0x3f0 [ 1263.692629] ? lock_downgrade+0x740/0x740 [ 1263.696773] ? __fget+0x265/0x3e0 [ 1263.700225] ? __fdget+0x19b/0x1f0 [ 1263.703765] ? sockfd_lookup_light+0xb2/0x160 [ 1263.708270] __sys_sendmsg+0xa3/0x120 [ 1263.712064] ? SyS_shutdown+0x160/0x160 [ 1263.716034] ? wait_for_completion_io+0x10/0x10 [ 1263.720707] ? SyS_read+0x210/0x210 [ 1263.724337] SyS_sendmsg+0x27/0x40 [ 1263.727960] ? __sys_sendmsg+0x120/0x120 [ 1263.732015] do_syscall_64+0x1d5/0x640 [ 1263.735910] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1263.741093] RIP: 0033:0x7f3ba0f2e0f9 [ 1263.744795] RSP: 002b:00007f3b9f4a0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.752499] RAX: ffffffffffffffda RBX: 00007f3ba104df80 RCX: 00007f3ba0f2e0f9 23:06:33 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={r2, 0x1}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x2, 0xffffffff, 0x8000}) 23:06:33 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 8) [ 1263.759761] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1263.767027] RBP: 00007f3b9f4a01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1263.774294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.781557] R13: 00007ffc3fc67fbf R14: 00007f3b9f4a0300 R15: 0000000000022000 [ 1263.788855] CPU: 1 PID: 31264 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 1263.796862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1263.806237] Call Trace: [ 1263.808849] dump_stack+0x1b2/0x281 [ 1263.812499] should_fail.cold+0x10a/0x149 [ 1263.816668] should_failslab+0xd6/0x130 [ 1263.820679] kmem_cache_alloc_node+0x263/0x410 [ 1263.825291] __alloc_skb+0x5c/0x510 [ 1263.828936] netlink_sendmsg+0x927/0xbc0 [ 1263.833014] ? nlmsg_notify+0x1b0/0x1b0 [ 1263.837001] ? kernel_recvmsg+0x210/0x210 [ 1263.841174] ? security_socket_sendmsg+0x83/0xb0 [ 1263.845954] ? nlmsg_notify+0x1b0/0x1b0 [ 1263.849948] sock_sendmsg+0xb5/0x100 [ 1263.853678] ___sys_sendmsg+0x6c8/0x800 [ 1263.857668] ? get_pid_task+0x91/0x130 [ 1263.861569] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1263.866444] ? lock_downgrade+0x740/0x740 [ 1263.870609] ? __fget+0x23e/0x3e0 [ 1263.874081] ? lock_acquire+0x170/0x3f0 [ 1263.878069] ? lock_downgrade+0x740/0x740 [ 1263.882237] ? __fget+0x265/0x3e0 [ 1263.885711] ? __fdget+0x19b/0x1f0 [ 1263.889266] ? sockfd_lookup_light+0xb2/0x160 [ 1263.893778] __sys_sendmsg+0xa3/0x120 [ 1263.897688] ? SyS_shutdown+0x160/0x160 [ 1263.901676] ? wait_for_completion_io+0x10/0x10 [ 1263.906371] ? SyS_read+0x210/0x210 [ 1263.910014] SyS_sendmsg+0x27/0x40 [ 1263.913564] ? __sys_sendmsg+0x120/0x120 [ 1263.917640] do_syscall_64+0x1d5/0x640 [ 1263.921552] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1263.926749] RIP: 0033:0x7f526da8a0f9 [ 1263.930466] RSP: 002b:00007f526bffc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.931623] FAULT_INJECTION: forcing a failure. [ 1263.931623] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.938182] RAX: ffffffffffffffda RBX: 00007f526dba9f80 RCX: 00007f526da8a0f9 23:06:33 executing program 4: syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x248003) r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x2, 0x3, 0x9, &(0x7f0000000000)) 23:06:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661fc, 0x40, 0x80000, 0x84800}) [ 1263.938190] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1263.938197] RBP: 00007f526bffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1263.938209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.938216] R13: 00007fff01e2377f R14: 00007f526bffc300 R15: 0000000000022000 [ 1263.998998] CPU: 1 PID: 31274 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1264.006924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1264.016292] Call Trace: [ 1264.018892] dump_stack+0x1b2/0x281 [ 1264.022541] should_fail.cold+0x10a/0x149 [ 1264.026707] should_failslab+0xd6/0x130 [ 1264.030700] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1264.035385] ccid_get_builtin_ccids+0x6b/0x1c0 [ 1264.039983] dccp_feat_init+0x2be/0x6b0 [ 1264.043976] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1264.049095] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1264.054122] ? init_timer_key+0x68/0x300 [ 1264.058204] ? __lockdep_init_map+0x100/0x560 [ 1264.062713] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1264.068527] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1264.074350] ? compat_dccp_setsockopt+0x70/0x70 [ 1264.079051] dccp_init_sock+0x2f1/0x3c0 [ 1264.083048] dccp_v6_init_sock+0x1a/0x80 [ 1264.087122] ? dccp_v6_rcv+0x1590/0x1590 [ 1264.091207] inet6_create+0x8f1/0xe20 [ 1264.095020] __sock_create+0x303/0x620 [ 1264.098918] SyS_socketpair+0xdf/0x480 [ 1264.102797] ? SyS_socket+0x1b0/0x1b0 [ 1264.106590] ? SyS_read+0x210/0x210 [ 1264.110212] ? __do_page_fault+0x159/0xad0 [ 1264.114467] ? do_syscall_64+0x4c/0x640 [ 1264.118437] ? SyS_socket+0x1b0/0x1b0 [ 1264.122230] do_syscall_64+0x1d5/0x640 [ 1264.126117] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1264.131389] RIP: 0033:0x7fbc383ab0f9 [ 1264.135100] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1264.142903] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1264.150160] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a 23:06:33 executing program 2: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) r2 = dup(r1) recvfrom$l2tp(r2, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (fail_nth: 6) 23:06:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661fc, 0x40, 0x80000, 0x84800}) 23:06:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (fail_nth: 2) 23:06:33 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 9) [ 1264.157421] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.164681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.171956] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 23:06:33 executing program 2: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) r2 = dup(r1) recvfrom$l2tp(r2, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) [ 1264.226275] FAULT_INJECTION: forcing a failure. [ 1264.226275] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.242949] FAULT_INJECTION: forcing a failure. [ 1264.242949] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.246026] FAULT_INJECTION: forcing a failure. [ 1264.246026] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.274104] CPU: 1 PID: 31289 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 [ 1264.282031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1264.291394] Call Trace: [ 1264.293998] dump_stack+0x1b2/0x281 [ 1264.297641] should_fail.cold+0x10a/0x149 [ 1264.301801] should_failslab+0xd6/0x130 [ 1264.305788] kmem_cache_alloc+0x40/0x3c0 [ 1264.309882] skb_clone+0x126/0x9a0 [ 1264.313440] netlink_deliver_tap+0x67e/0x860 [ 1264.317873] netlink_sendskb+0x45/0xd0 [ 1264.321772] netlink_unicast+0x50a/0x610 [ 1264.325849] ? netlink_sendskb+0xd0/0xd0 [ 1264.329998] ? __nlmsg_put+0x155/0x1c0 [ 1264.333894] netlink_ack+0x514/0x9a0 [ 1264.337619] ? netlink_sendmsg+0xbc0/0xbc0 [ 1264.341869] netlink_rcv_skb+0x2c5/0x390 [ 1264.345935] ? genl_family_rcv_msg+0xb20/0xb20 [ 1264.350526] ? netlink_ack+0x9a0/0x9a0 [ 1264.354444] ? lock_acquire+0x170/0x3f0 [ 1264.358426] genl_rcv+0x24/0x40 [ 1264.361704] netlink_unicast+0x437/0x610 [ 1264.365771] ? netlink_sendskb+0xd0/0xd0 [ 1264.370328] ? __check_object_size+0x179/0x230 [ 1264.374918] netlink_sendmsg+0x651/0xbc0 [ 1264.378993] ? nlmsg_notify+0x1b0/0x1b0 [ 1264.382976] ? kernel_recvmsg+0x210/0x210 [ 1264.387131] ? security_socket_sendmsg+0x83/0xb0 [ 1264.391888] ? nlmsg_notify+0x1b0/0x1b0 [ 1264.395867] sock_sendmsg+0xb5/0x100 [ 1264.399585] ___sys_sendmsg+0x6c8/0x800 [ 1264.403563] ? get_pid_task+0x91/0x130 [ 1264.407468] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1264.412221] ? lock_downgrade+0x740/0x740 [ 1264.416372] ? __fget+0x23e/0x3e0 [ 1264.419832] ? lock_acquire+0x170/0x3f0 [ 1264.423808] ? lock_downgrade+0x740/0x740 [ 1264.427970] ? __fget+0x265/0x3e0 [ 1264.431427] ? __fdget+0x19b/0x1f0 [ 1264.434971] ? sockfd_lookup_light+0xb2/0x160 [ 1264.439472] __sys_sendmsg+0xa3/0x120 [ 1264.443273] ? SyS_shutdown+0x160/0x160 [ 1264.447250] ? wait_for_completion_io+0x10/0x10 [ 1264.451922] ? SyS_read+0x210/0x210 [ 1264.455555] SyS_sendmsg+0x27/0x40 [ 1264.459102] ? __sys_sendmsg+0x120/0x120 [ 1264.463164] do_syscall_64+0x1d5/0x640 [ 1264.467056] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1264.472329] RIP: 0033:0x7f3ba0f2e0f9 23:06:33 executing program 2: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) r2 = dup(r1) recvfrom$l2tp(r2, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) [ 1264.476042] RSP: 002b:00007f3b9f4a0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.483755] RAX: ffffffffffffffda RBX: 00007f3ba104df80 RCX: 00007f3ba0f2e0f9 [ 1264.491019] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1264.498281] RBP: 00007f3b9f4a01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.505593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.512856] R13: 00007ffc3fc67fbf R14: 00007f3b9f4a0300 R15: 0000000000022000 23:06:33 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) [ 1264.520141] CPU: 0 PID: 31293 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 1264.528151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1264.537518] Call Trace: [ 1264.540124] dump_stack+0x1b2/0x281 [ 1264.543775] should_fail.cold+0x10a/0x149 [ 1264.547947] should_failslab+0xd6/0x130 [ 1264.551937] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1264.557061] __kmalloc_node_track_caller+0x38/0x70 [ 1264.562007] __alloc_skb+0x96/0x510 [ 1264.565659] netlink_sendmsg+0x927/0xbc0 [ 1264.569737] ? nlmsg_notify+0x1b0/0x1b0 [ 1264.573726] ? kernel_recvmsg+0x210/0x210 [ 1264.577935] ? security_socket_sendmsg+0x83/0xb0 [ 1264.582703] ? nlmsg_notify+0x1b0/0x1b0 [ 1264.586693] sock_sendmsg+0xb5/0x100 [ 1264.590422] ___sys_sendmsg+0x6c8/0x800 [ 1264.594412] ? get_pid_task+0x91/0x130 [ 1264.598311] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1264.603075] ? lock_downgrade+0x740/0x740 [ 1264.607225] ? __fget+0x23e/0x3e0 [ 1264.610675] ? lock_acquire+0x170/0x3f0 [ 1264.614654] ? lock_downgrade+0x740/0x740 [ 1264.618800] ? __fget+0x265/0x3e0 [ 1264.622260] ? __fdget+0x19b/0x1f0 [ 1264.625830] ? sockfd_lookup_light+0xb2/0x160 [ 1264.630329] __sys_sendmsg+0xa3/0x120 [ 1264.634133] ? SyS_shutdown+0x160/0x160 [ 1264.638107] ? wait_for_completion_io+0x10/0x10 [ 1264.642785] ? SyS_read+0x210/0x210 [ 1264.646411] SyS_sendmsg+0x27/0x40 [ 1264.649953] ? __sys_sendmsg+0x120/0x120 [ 1264.654011] do_syscall_64+0x1d5/0x640 [ 1264.657901] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1264.663087] RIP: 0033:0x7f526da8a0f9 [ 1264.666793] RSP: 002b:00007f526bffc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.674696] RAX: ffffffffffffffda RBX: 00007f526dba9f80 RCX: 00007f526da8a0f9 [ 1264.681963] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1264.689233] RBP: 00007f526bffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.696503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.703768] R13: 00007fff01e2377f R14: 00007f526bffc300 R15: 0000000000022000 [ 1264.711053] CPU: 1 PID: 31292 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1264.718984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1264.728435] Call Trace: [ 1264.731035] dump_stack+0x1b2/0x281 [ 1264.734682] should_fail.cold+0x10a/0x149 [ 1264.738840] should_failslab+0xd6/0x130 [ 1264.742840] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1264.747552] ccid_get_builtin_ccids+0x6b/0x1c0 [ 1264.752248] dccp_feat_init+0x2e4/0x6b0 [ 1264.756243] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1264.761357] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1264.766388] ? init_timer_on_stack_key+0x82/0xa0 [ 1264.771161] ? __lockdep_init_map+0x100/0x560 23:06:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (fail_nth: 3) [ 1264.775680] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1264.781495] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1264.787304] ? compat_dccp_setsockopt+0x70/0x70 [ 1264.791990] dccp_init_sock+0x2f1/0x3c0 [ 1264.795981] dccp_v6_init_sock+0x1a/0x80 [ 1264.800057] ? dccp_v6_rcv+0x1590/0x1590 [ 1264.804150] inet6_create+0x8f1/0xe20 [ 1264.807970] __sock_create+0x303/0x620 [ 1264.811880] SyS_socketpair+0xdf/0x480 [ 1264.815784] ? SyS_socket+0x1b0/0x1b0 [ 1264.819600] ? SyS_read+0x210/0x210 [ 1264.823243] ? __do_page_fault+0x159/0xad0 [ 1264.827489] ? do_syscall_64+0x4c/0x640 [ 1264.831466] FAULT_INJECTION: forcing a failure. [ 1264.831466] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.842671] ? SyS_socket+0x1b0/0x1b0 [ 1264.846477] do_syscall_64+0x1d5/0x640 [ 1264.850375] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1264.855572] RIP: 0033:0x7fbc383ab0f9 [ 1264.859286] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1264.867339] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1264.874610] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1264.881879] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.889146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.896418] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 [ 1264.903710] CPU: 0 PID: 31307 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 1264.911621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1264.920989] Call Trace: [ 1264.923606] dump_stack+0x1b2/0x281 [ 1264.927304] should_fail.cold+0x10a/0x149 [ 1264.931472] should_failslab+0xd6/0x130 [ 1264.935461] kmem_cache_alloc+0x40/0x3c0 [ 1264.939534] skb_clone+0x126/0x9a0 [ 1264.943087] netlink_deliver_tap+0x67e/0x860 [ 1264.947565] netlink_unicast+0x485/0x610 [ 1264.951645] ? netlink_sendskb+0xd0/0xd0 [ 1264.955718] ? __check_object_size+0x179/0x230 [ 1264.960318] netlink_sendmsg+0x651/0xbc0 [ 1264.964400] ? nlmsg_notify+0x1b0/0x1b0 [ 1264.968385] ? kernel_recvmsg+0x210/0x210 [ 1264.972555] ? security_socket_sendmsg+0x83/0xb0 23:06:34 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 10) 23:06:34 executing program 4: syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x248003) socket$l2tp(0x2, 0x2, 0x73) socketpair(0x2, 0x3, 0x9, &(0x7f0000000000)) 23:06:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (fail_nth: 7) 23:06:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661fc, 0x40, 0x80000, 0x84800}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661fc, 0x40, 0x80000, 0x84800}) [ 1264.977331] ? nlmsg_notify+0x1b0/0x1b0 [ 1264.981319] sock_sendmsg+0xb5/0x100 [ 1264.985052] ___sys_sendmsg+0x6c8/0x800 [ 1264.989042] ? get_pid_task+0x91/0x130 [ 1264.992941] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1264.997720] ? lock_downgrade+0x740/0x740 [ 1265.001889] ? __fget+0x23e/0x3e0 [ 1265.005360] ? lock_acquire+0x170/0x3f0 [ 1265.009378] ? lock_downgrade+0x740/0x740 [ 1265.013526] FAULT_INJECTION: forcing a failure. [ 1265.013526] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.024726] ? __fget+0x265/0x3e0 23:06:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0xd6, 0x1, 0xc1, 0xb2}, 0x6) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) [ 1265.028194] ? __fdget+0x19b/0x1f0 [ 1265.031746] ? sockfd_lookup_light+0xb2/0x160 [ 1265.036263] __sys_sendmsg+0xa3/0x120 [ 1265.040076] ? SyS_shutdown+0x160/0x160 [ 1265.044081] ? wait_for_completion_io+0x10/0x10 [ 1265.048814] ? SyS_read+0x210/0x210 [ 1265.052457] SyS_sendmsg+0x27/0x40 [ 1265.056009] ? __sys_sendmsg+0x120/0x120 [ 1265.060088] do_syscall_64+0x1d5/0x640 [ 1265.064020] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1265.069215] RIP: 0033:0x7f526da8a0f9 23:06:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0xd6, 0x1, 0xc1, 0xb2}, 0x6) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0xd6, 0x1, 0xc1, 0xb2}, 0x6) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) [ 1265.072930] RSP: 002b:00007f526bffc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.080653] RAX: ffffffffffffffda RBX: 00007f526dba9f80 RCX: 00007f526da8a0f9 [ 1265.087939] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1265.095220] RBP: 00007f526bffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.102505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.109796] R13: 00007fff01e2377f R14: 00007f526bffc300 R15: 0000000000022000 [ 1265.133019] CPU: 1 PID: 31316 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1265.140945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1265.150312] Call Trace: [ 1265.152923] dump_stack+0x1b2/0x281 [ 1265.156572] should_fail.cold+0x10a/0x149 [ 1265.160739] should_failslab+0xd6/0x130 [ 1265.164733] __kmalloc_track_caller+0x2bc/0x400 [ 1265.169418] ? dccp_feat_clone_sp_val.part.0+0x4a/0xd0 [ 1265.174719] kmemdup+0x23/0x50 [ 1265.177933] dccp_feat_clone_sp_val.part.0+0x4a/0xd0 [ 1265.183060] __feat_register_sp+0x19d/0x490 [ 1265.187402] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1265.192007] ? ccid_get_builtin_ccids+0x155/0x1c0 [ 1265.196881] dccp_feat_init+0x5ce/0x6b0 [ 1265.200882] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1265.205344] FAULT_INJECTION: forcing a failure. [ 1265.205344] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.206002] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1265.206019] ? init_timer_on_stack_key+0x82/0xa0 [ 1265.206039] ? __lockdep_init_map+0x100/0x560 23:06:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (fail_nth: 4) [ 1265.231480] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1265.237291] ? compat_dccp_setsockopt+0x70/0x70 [ 1265.241961] dccp_init_sock+0x2f1/0x3c0 [ 1265.245936] dccp_v6_init_sock+0x1a/0x80 [ 1265.250000] ? dccp_v6_rcv+0x1590/0x1590 [ 1265.254079] inet6_create+0x8f1/0xe20 [ 1265.257892] __sock_create+0x303/0x620 [ 1265.261794] SyS_socketpair+0xdf/0x480 [ 1265.265688] ? SyS_socket+0x1b0/0x1b0 [ 1265.269491] ? SyS_read+0x210/0x210 [ 1265.273117] ? __do_page_fault+0x159/0xad0 [ 1265.277345] ? do_syscall_64+0x4c/0x640 [ 1265.281313] ? SyS_socket+0x1b0/0x1b0 [ 1265.285112] do_syscall_64+0x1d5/0x640 [ 1265.289001] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1265.294208] RIP: 0033:0x7fbc383ab0f9 [ 1265.297911] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1265.305618] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1265.312970] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1265.320233] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.327501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1265.334780] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 [ 1265.342073] CPU: 0 PID: 31333 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 1265.349974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1265.359337] Call Trace: [ 1265.362044] dump_stack+0x1b2/0x281 [ 1265.365696] should_fail.cold+0x10a/0x149 [ 1265.369920] should_failslab+0xd6/0x130 [ 1265.373912] kmem_cache_alloc_node+0x263/0x410 [ 1265.378518] __alloc_skb+0x5c/0x510 [ 1265.382250] netlink_ack+0x216/0x9a0 [ 1265.385983] ? netlink_sendmsg+0xbc0/0xbc0 [ 1265.390240] netlink_rcv_skb+0x2c5/0x390 [ 1265.394329] ? genl_family_rcv_msg+0xb20/0xb20 [ 1265.398929] ? netlink_ack+0x9a0/0x9a0 [ 1265.403393] ? lock_acquire+0x170/0x3f0 [ 1265.407412] genl_rcv+0x24/0x40 [ 1265.410704] netlink_unicast+0x437/0x610 [ 1265.414782] ? netlink_sendskb+0xd0/0xd0 [ 1265.418860] ? __check_object_size+0x179/0x230 [ 1265.423454] netlink_sendmsg+0x651/0xbc0 [ 1265.427537] ? nlmsg_notify+0x1b0/0x1b0 [ 1265.431526] ? kernel_recvmsg+0x210/0x210 [ 1265.431679] FAULT_INJECTION: forcing a failure. [ 1265.431679] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.435680] ? security_socket_sendmsg+0x83/0xb0 [ 1265.435693] ? nlmsg_notify+0x1b0/0x1b0 [ 1265.435706] sock_sendmsg+0xb5/0x100 [ 1265.435720] ___sys_sendmsg+0x6c8/0x800 [ 1265.435732] ? get_pid_task+0x91/0x130 [ 1265.435743] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1265.435765] ? lock_downgrade+0x740/0x740 [ 1265.476121] ? __fget+0x23e/0x3e0 [ 1265.479589] ? lock_acquire+0x170/0x3f0 23:06:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0xd6, 0x1, 0xc1, 0xb2}, 0x6) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x900, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x97}]}, 0x2c}}, 0x804) 23:06:34 executing program 4: syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x248003) socketpair(0x2, 0x3, 0x9, &(0x7f0000000000)) 23:06:34 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:34 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 11) 23:06:34 executing program 1: write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='cubic\x00', 0x6) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0xfffffffd}) r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x80100) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20000001, 0x2000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x442001, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x2, 0x6, 0x6}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x120}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) 23:06:34 executing program 1: write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='cubic\x00', 0x6) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0xfffffffd}) r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x80100) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20000001, 0x2000) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x442001, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x2, 0x6, 0x6}) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x120}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) [ 1265.483591] ? lock_downgrade+0x740/0x740 [ 1265.488055] ? __fget+0x265/0x3e0 [ 1265.491547] ? __fdget+0x19b/0x1f0 [ 1265.495099] ? sockfd_lookup_light+0xb2/0x160 [ 1265.499607] __sys_sendmsg+0xa3/0x120 [ 1265.503422] ? SyS_shutdown+0x160/0x160 [ 1265.507406] ? wait_for_completion_io+0x10/0x10 [ 1265.512083] ? SyS_read+0x210/0x210 [ 1265.515725] SyS_sendmsg+0x27/0x40 [ 1265.519279] ? __sys_sendmsg+0x120/0x120 [ 1265.523365] do_syscall_64+0x1d5/0x640 [ 1265.527269] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 23:06:34 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 12) 23:06:34 executing program 4: socketpair(0x2, 0x3, 0x9, &(0x7f0000000000)) 23:06:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x900, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x97}]}, 0x2c}}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0xfffffffe) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x900, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x97}]}, 0x2c}}, 0x804) (async) [ 1265.527278] RIP: 0033:0x7f526da8a0f9 [ 1265.527284] RSP: 002b:00007f526bffc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 23:06:34 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 13) [ 1265.527294] RAX: ffffffffffffffda RBX: 00007f526dba9f80 RCX: 00007f526da8a0f9 [ 1265.527300] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1265.527306] RBP: 00007f526bffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.527312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.527318] R13: 00007fff01e2377f R14: 00007f526bffc300 R15: 0000000000022000 [ 1265.527342] CPU: 1 PID: 31345 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1265.527350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1265.527354] Call Trace: [ 1265.527367] dump_stack+0x1b2/0x281 [ 1265.527384] should_fail.cold+0x10a/0x149 [ 1265.527402] should_failslab+0xd6/0x130 [ 1265.527421] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1265.527438] dccp_feat_entry_new+0x173/0x350 23:06:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (fail_nth: 5) 23:06:35 executing program 4: socketpair(0x0, 0x3, 0x9, &(0x7f0000000000)) 23:06:35 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 14) 23:06:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x900, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x97}]}, 0x2c}}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0xfffffffe) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x900, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x97}]}, 0x2c}}, 0x804) (async) [ 1265.527455] __feat_register_sp+0x1c9/0x490 [ 1265.527470] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1265.527484] ? ccid_get_builtin_ccids+0x155/0x1c0 [ 1265.527497] dccp_feat_init+0x5ce/0x6b0 [ 1265.527513] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1265.527526] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1265.527538] ? init_timer_on_stack_key+0x82/0xa0 [ 1265.527551] ? __lockdep_init_map+0x100/0x560 [ 1265.527567] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1265.527579] ? compat_dccp_setsockopt+0x70/0x70 [ 1265.527592] dccp_init_sock+0x2f1/0x3c0 [ 1265.527608] dccp_v6_init_sock+0x1a/0x80 [ 1265.527621] ? dccp_v6_rcv+0x1590/0x1590 [ 1265.527633] inet6_create+0x8f1/0xe20 [ 1265.527652] __sock_create+0x303/0x620 [ 1265.527670] SyS_socketpair+0xdf/0x480 [ 1265.527683] ? SyS_socket+0x1b0/0x1b0 [ 1265.527696] ? SyS_read+0x210/0x210 [ 1265.527709] ? __do_page_fault+0x159/0xad0 [ 1265.527721] ? do_syscall_64+0x4c/0x640 [ 1265.527731] ? SyS_socket+0x1b0/0x1b0 [ 1265.527744] do_syscall_64+0x1d5/0x640 [ 1265.527763] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1265.527771] RIP: 0033:0x7fbc383ab0f9 [ 1265.527777] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1265.527789] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1265.527796] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1265.527803] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.527810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1265.527817] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 [ 1265.616084] FAULT_INJECTION: forcing a failure. [ 1265.616084] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.616098] CPU: 1 PID: 31362 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1265.616106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1265.616110] Call Trace: [ 1265.616130] dump_stack+0x1b2/0x281 [ 1265.616150] should_fail.cold+0x10a/0x149 [ 1265.616167] should_failslab+0xd6/0x130 [ 1265.616183] __kmalloc_track_caller+0x2bc/0x400 [ 1265.616196] ? dccp_feat_clone_sp_val.part.0+0x4a/0xd0 [ 1265.616209] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1265.616224] kmemdup+0x23/0x50 [ 1265.616237] dccp_feat_clone_sp_val.part.0+0x4a/0xd0 [ 1265.616252] __feat_register_sp+0x19d/0x490 [ 1265.616268] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1265.616282] ? ccid_get_builtin_ccids+0x155/0x1c0 [ 1265.616296] dccp_feat_init+0x600/0x6b0 [ 1265.616312] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1265.616326] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1265.616338] ? init_timer_on_stack_key+0x82/0xa0 [ 1265.616351] ? __lockdep_init_map+0x100/0x560 [ 1265.616366] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1265.616378] ? compat_dccp_setsockopt+0x70/0x70 [ 1265.616393] dccp_init_sock+0x2f1/0x3c0 [ 1265.616407] dccp_v6_init_sock+0x1a/0x80 [ 1265.616419] ? dccp_v6_rcv+0x1590/0x1590 [ 1265.616431] inet6_create+0x8f1/0xe20 [ 1265.616449] __sock_create+0x303/0x620 [ 1265.616466] SyS_socketpair+0xdf/0x480 [ 1265.616479] ? SyS_socket+0x1b0/0x1b0 [ 1265.616493] ? SyS_read+0x210/0x210 [ 1265.616505] ? __do_page_fault+0x159/0xad0 [ 1265.616517] ? do_syscall_64+0x4c/0x640 [ 1265.616528] ? SyS_socket+0x1b0/0x1b0 [ 1265.616541] do_syscall_64+0x1d5/0x640 [ 1265.616560] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1265.616570] RIP: 0033:0x7fbc383ab0f9 [ 1265.616577] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1265.616590] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1265.616597] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1265.616604] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.616611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1265.616618] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 [ 1265.669117] FAULT_INJECTION: forcing a failure. [ 1265.669117] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.669132] CPU: 1 PID: 31373 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1265.669140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1265.669144] Call Trace: [ 1265.669162] dump_stack+0x1b2/0x281 [ 1265.669181] should_fail.cold+0x10a/0x149 23:06:35 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:35 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 15) 23:06:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (fail_nth: 6) [ 1265.669200] should_failslab+0xd6/0x130 [ 1265.669216] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1265.669234] dccp_feat_entry_new+0x173/0x350 [ 1265.669251] __feat_register_sp+0x1c9/0x490 [ 1265.669267] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1265.669281] ? ccid_get_builtin_ccids+0x155/0x1c0 [ 1265.669295] dccp_feat_init+0x600/0x6b0 [ 1265.669312] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1265.669326] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1265.669338] ? init_timer_on_stack_key+0x82/0xa0 [ 1265.669351] ? __lockdep_init_map+0x100/0x560 [ 1265.669366] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1265.669378] ? compat_dccp_setsockopt+0x70/0x70 [ 1265.669392] dccp_init_sock+0x2f1/0x3c0 [ 1265.669407] dccp_v6_init_sock+0x1a/0x80 [ 1265.669419] ? dccp_v6_rcv+0x1590/0x1590 [ 1265.669431] inet6_create+0x8f1/0xe20 [ 1265.669451] __sock_create+0x303/0x620 [ 1265.669469] SyS_socketpair+0xdf/0x480 [ 1265.669481] ? SyS_socket+0x1b0/0x1b0 [ 1265.669495] ? SyS_read+0x210/0x210 [ 1265.669508] ? __do_page_fault+0x159/0xad0 [ 1265.669523] ? do_syscall_64+0x4c/0x640 [ 1265.669535] ? SyS_socket+0x1b0/0x1b0 [ 1265.669553] do_syscall_64+0x1d5/0x640 [ 1265.669574] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1265.669584] RIP: 0033:0x7fbc383ab0f9 [ 1265.669591] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1265.669604] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1265.669612] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1265.669619] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.669626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1265.669634] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 [ 1265.842602] FAULT_INJECTION: forcing a failure. [ 1265.842602] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.842616] CPU: 1 PID: 31382 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1265.842625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1265.842629] Call Trace: [ 1265.842646] dump_stack+0x1b2/0x281 [ 1265.842665] should_fail.cold+0x10a/0x149 [ 1265.842682] should_failslab+0xd6/0x130 [ 1265.842699] kmem_cache_alloc+0x28e/0x3c0 [ 1265.842712] ? sock_destroy_inode+0x60/0x60 [ 1265.842725] sock_alloc_inode+0x19/0x250 [ 1265.842736] ? sock_destroy_inode+0x60/0x60 [ 1265.842749] alloc_inode+0x5d/0x170 [ 1265.842760] new_inode_pseudo+0x14/0xe0 [ 1265.842772] sock_alloc+0x3c/0x270 [ 1265.842785] __sock_create+0x8a/0x620 [ 1265.842802] SyS_socketpair+0x159/0x480 [ 1265.842816] ? SyS_socket+0x1b0/0x1b0 [ 1265.842829] ? SyS_read+0x210/0x210 [ 1265.842842] ? __do_page_fault+0x159/0xad0 [ 1265.842854] ? do_syscall_64+0x4c/0x640 [ 1265.842864] ? SyS_socket+0x1b0/0x1b0 [ 1265.842878] do_syscall_64+0x1d5/0x640 [ 1265.842897] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1265.842907] RIP: 0033:0x7fbc383ab0f9 [ 1265.842914] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1265.842932] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1265.842939] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1265.842947] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.842954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1265.842961] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 [ 1265.844895] socket: no more sockets [ 1265.868664] FAULT_INJECTION: forcing a failure. [ 1265.868664] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.868680] CPU: 1 PID: 31390 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 1265.868687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1265.868692] Call Trace: [ 1265.868708] dump_stack+0x1b2/0x281 [ 1265.868727] should_fail.cold+0x10a/0x149 [ 1265.868744] should_failslab+0xd6/0x130 [ 1265.868761] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1265.868781] __kmalloc_node_track_caller+0x38/0x70 [ 1265.868794] __alloc_skb+0x96/0x510 [ 1265.868809] netlink_ack+0x216/0x9a0 [ 1265.868823] ? netlink_sendmsg+0xbc0/0xbc0 [ 1265.868840] netlink_rcv_skb+0x2c5/0x390 [ 1265.868853] ? genl_family_rcv_msg+0xb20/0xb20 [ 1265.868867] ? netlink_ack+0x9a0/0x9a0 [ 1265.868880] ? lock_acquire+0x170/0x3f0 [ 1265.868901] genl_rcv+0x24/0x40 [ 1265.868912] netlink_unicast+0x437/0x610 [ 1265.868926] ? netlink_sendskb+0xd0/0xd0 [ 1265.868939] ? __check_object_size+0x179/0x230 [ 1265.868953] netlink_sendmsg+0x651/0xbc0 [ 1265.868969] ? nlmsg_notify+0x1b0/0x1b0 [ 1265.868979] ? kernel_recvmsg+0x210/0x210 [ 1265.868999] ? security_socket_sendmsg+0x83/0xb0 [ 1265.869011] ? nlmsg_notify+0x1b0/0x1b0 [ 1265.869023] sock_sendmsg+0xb5/0x100 [ 1265.869047] ___sys_sendmsg+0x6c8/0x800 [ 1265.869059] ? get_pid_task+0x91/0x130 [ 1265.869072] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1265.869089] ? lock_downgrade+0x740/0x740 [ 1265.869106] ? __fget+0x23e/0x3e0 [ 1265.869122] ? lock_acquire+0x170/0x3f0 [ 1265.869136] ? lock_downgrade+0x740/0x740 [ 1265.869152] ? __fget+0x265/0x3e0 [ 1265.869171] ? __fdget+0x19b/0x1f0 [ 1265.869184] ? sockfd_lookup_light+0xb2/0x160 [ 1265.869199] __sys_sendmsg+0xa3/0x120 [ 1265.869211] ? SyS_shutdown+0x160/0x160 [ 1265.869226] ? wait_for_completion_io+0x10/0x10 [ 1265.869249] ? SyS_read+0x210/0x210 [ 1265.869264] SyS_sendmsg+0x27/0x40 [ 1265.869275] ? __sys_sendmsg+0x120/0x120 [ 1265.869288] do_syscall_64+0x1d5/0x640 [ 1265.869308] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1265.869318] RIP: 0033:0x7f526da8a0f9 [ 1265.869325] RSP: 002b:00007f526bffc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.869339] RAX: ffffffffffffffda RBX: 00007f526dba9f80 RCX: 00007f526da8a0f9 [ 1265.869346] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1265.869353] RBP: 00007f526bffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.869360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.869368] R13: 00007fff01e2377f R14: 00007f526bffc300 R15: 0000000000022000 [ 1266.285002] FAULT_INJECTION: forcing a failure. [ 1266.285002] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.285016] CPU: 0 PID: 31399 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1266.285024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1266.285028] Call Trace: [ 1266.285045] dump_stack+0x1b2/0x281 [ 1266.285064] should_fail.cold+0x10a/0x149 [ 1266.285081] should_failslab+0xd6/0x130 [ 1266.285097] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1266.285109] ? kmem_cache_alloc+0x35f/0x3c0 [ 1266.285125] sock_alloc_inode+0x5f/0x250 [ 1266.285137] ? sock_destroy_inode+0x60/0x60 [ 1266.285149] alloc_inode+0x5d/0x170 [ 1266.285160] new_inode_pseudo+0x14/0xe0 [ 1266.285171] sock_alloc+0x3c/0x270 [ 1266.285184] __sock_create+0x8a/0x620 [ 1266.285202] SyS_socketpair+0x159/0x480 [ 1266.285215] ? SyS_socket+0x1b0/0x1b0 [ 1266.285228] ? SyS_read+0x210/0x210 [ 1266.285241] ? __do_page_fault+0x159/0xad0 [ 1266.285253] ? do_syscall_64+0x4c/0x640 [ 1266.285264] ? SyS_socket+0x1b0/0x1b0 [ 1266.285277] do_syscall_64+0x1d5/0x640 [ 1266.285297] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1266.285306] RIP: 0033:0x7fbc383ab0f9 [ 1266.285313] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1266.285325] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1266.285332] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1266.285339] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.285346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1266.285353] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 [ 1266.285380] socket: no more sockets [ 1266.292193] FAULT_INJECTION: forcing a failure. [ 1266.292193] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.984526] CPU: 0 PID: 31400 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 [ 1266.992444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1267.001813] Call Trace: [ 1267.004425] dump_stack+0x1b2/0x281 [ 1267.008074] should_fail.cold+0x10a/0x149 [ 1267.012245] should_failslab+0xd6/0x130 [ 1267.016242] kmem_cache_alloc+0x40/0x3c0 [ 1267.020317] skb_clone+0x126/0x9a0 [ 1267.023874] netlink_deliver_tap+0x67e/0x860 [ 1267.028299] netlink_sendskb+0x45/0xd0 [ 1267.032197] netlink_unicast+0x50a/0x610 [ 1267.036268] ? netlink_sendskb+0xd0/0xd0 [ 1267.040354] ? __nlmsg_put+0x155/0x1c0 [ 1267.040370] netlink_ack+0x514/0x9a0 [ 1267.047973] ? netlink_sendmsg+0xbc0/0xbc0 [ 1267.052225] netlink_rcv_skb+0x2c5/0x390 [ 1267.056439] ? genl_family_rcv_msg+0xb20/0xb20 [ 1267.061036] ? netlink_ack+0x9a0/0x9a0 [ 1267.064934] ? lock_acquire+0x170/0x3f0 [ 1267.068931] genl_rcv+0x24/0x40 [ 1267.072219] netlink_unicast+0x437/0x610 [ 1267.076291] ? netlink_sendskb+0xd0/0xd0 [ 1267.080364] ? __check_object_size+0x179/0x230 [ 1267.084966] netlink_sendmsg+0x651/0xbc0 [ 1267.089071] ? nlmsg_notify+0x1b0/0x1b0 [ 1267.093059] ? kernel_recvmsg+0x210/0x210 [ 1267.097223] ? security_socket_sendmsg+0x83/0xb0 [ 1267.101998] ? nlmsg_notify+0x1b0/0x1b0 [ 1267.106077] sock_sendmsg+0xb5/0x100 [ 1267.109807] ___sys_sendmsg+0x6c8/0x800 [ 1267.113793] ? get_pid_task+0x91/0x130 [ 1267.117689] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1267.122461] ? lock_downgrade+0x740/0x740 [ 1267.126626] ? __fget+0x23e/0x3e0 [ 1267.130102] ? lock_acquire+0x170/0x3f0 [ 1267.134103] ? lock_downgrade+0x740/0x740 [ 1267.138269] ? __fget+0x265/0x3e0 [ 1267.141829] ? __fdget+0x19b/0x1f0 [ 1267.145378] ? sockfd_lookup_light+0xb2/0x160 [ 1267.149898] __sys_sendmsg+0xa3/0x120 [ 1267.153725] ? SyS_shutdown+0x160/0x160 [ 1267.157721] ? wait_for_completion_io+0x10/0x10 [ 1267.162419] ? SyS_read+0x210/0x210 [ 1267.166062] SyS_sendmsg+0x27/0x40 [ 1267.169607] ? __sys_sendmsg+0x120/0x120 [ 1267.173689] do_syscall_64+0x1d5/0x640 [ 1267.177599] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1267.182924] RIP: 0033:0x7f526da8a0f9 [ 1267.186672] RSP: 002b:00007f526bffc168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 23:06:36 executing program 1: write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='cubic\x00', 0x6) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0xfffffffd}) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x80100) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20000001, 0x2000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x442001, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x2, 0x6, 0x6}) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x120}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) 23:06:36 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="765b00004b94ca766ea4b122b75416330d1000184cb3fe8ce26317edee4b94cd3b47603848e2e7fdaa5ac87d7b5853c9b51fc65ac45d6be552921165a886889e2f27881d27911a2aab851ff399", @ANYRESHEX=r3, @ANYBLOB="01000000c49f7b2e000005000000050052fe51b500002a29bbcd640d3813da145fc3257979142db8e484f0d9f3fdba0a633acce9f3343b528a19f8f303a061a28f3dd8da29ac1fa5151c2bd85652fb918f488e2caaaabb8412f546516d0c19d0654dc138f94ee23ba426fad34a046523c4f9b41e37cec3cc3154bfcceb9903395e708870cd668004a40a8a1486b2e49edf69fc0fe6aa7ec4932d9305916eb67b86508fd11d5b687c998af046a4ffc9067c85266a73573a11af62250e5710"], 0x1c}}, 0x0) 23:06:36 executing program 4: socketpair(0x0, 0x3, 0x9, &(0x7f0000000000)) 23:06:36 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 16) 23:06:36 executing program 4: socketpair(0x0, 0x3, 0x9, &(0x7f0000000000)) 23:06:36 executing program 4: socketpair(0x2, 0x0, 0x9, &(0x7f0000000000)) 23:06:36 executing program 4: socketpair(0x2, 0x0, 0x9, &(0x7f0000000000)) 23:06:36 executing program 4: socketpair(0x2, 0x0, 0x9, &(0x7f0000000000)) 23:06:36 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:36 executing program 4: socketpair(0x2, 0x3, 0x0, &(0x7f0000000000)) 23:06:36 executing program 5: syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="765b00004b94ca766ea4b122b75416330d1000184cb3fe8ce26317edee4b94cd3b47603848e2e7fdaa5ac87d7b5853c9b51fc65ac45d6be552921165a886889e2f27881d27911a2aab851ff399", @ANYRESHEX=r3, @ANYBLOB="01000000c49f7b2e000005000000050052fe51b500002a29bbcd640d3813da145fc3257979142db8e484f0d9f3fdba0a633acce9f3343b528a19f8f303a061a28f3dd8da29ac1fa5151c2bd85652fb918f488e2caaaabb8412f546516d0c19d0654dc138f94ee23ba426fad34a046523c4f9b41e37cec3cc3154bfcceb9903395e708870cd668004a40a8a1486b2e49edf69fc0fe6aa7ec4932d9305916eb67b86508fd11d5b687c998af046a4ffc9067c85266a73573a11af62250e5710"], 0x1c}}, 0x0) 23:06:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x0, 0x3, 0x4}) 23:06:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x5ce, 0x80800}) [ 1267.194486] RAX: ffffffffffffffda RBX: 00007f526dba9f80 RCX: 00007f526da8a0f9 [ 1267.201811] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1267.209094] RBP: 00007f526bffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1267.216494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.223783] R13: 00007fff01e2377f R14: 00007f526bffc300 R15: 0000000000022000 23:06:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x5ce, 0x80800}) 23:06:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x0, 0x3, 0x4}) [ 1267.341794] FAULT_INJECTION: forcing a failure. [ 1267.341794] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.379871] CPU: 0 PID: 31445 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1267.387885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1267.397256] Call Trace: [ 1267.399862] dump_stack+0x1b2/0x281 [ 1267.403520] should_fail.cold+0x10a/0x149 [ 1267.407692] should_failslab+0xd6/0x130 [ 1267.411691] kmem_cache_alloc+0x28e/0x3c0 [ 1267.415849] sk_prot_alloc+0x5f/0x290 [ 1267.419643] sk_alloc+0x36/0xcd0 [ 1267.423002] inet6_create+0x2df/0xe20 [ 1267.426800] __sock_create+0x303/0x620 [ 1267.430681] SyS_socketpair+0x159/0x480 [ 1267.434663] ? SyS_socket+0x1b0/0x1b0 [ 1267.438453] ? SyS_read+0x210/0x210 [ 1267.442157] ? __do_page_fault+0x159/0xad0 [ 1267.446382] ? do_syscall_64+0x4c/0x640 [ 1267.450357] ? SyS_socket+0x1b0/0x1b0 [ 1267.454151] do_syscall_64+0x1d5/0x640 [ 1267.458037] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1267.463217] RIP: 0033:0x7fbc383ab0f9 [ 1267.466916] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1267.474611] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1267.481868] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a 23:06:36 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 17) 23:06:36 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="765b00004b94ca766ea4b122b75416330d1000184cb3fe8ce26317edee4b94cd3b47603848e2e7fdaa5ac87d7b5853c9b51fc65ac45d6be552921165a886889e2f27881d27911a2aab851ff399", @ANYRESHEX=r3, @ANYBLOB="01000000c49f7b2e000005000000050052fe51b500002a29bbcd640d3813da145fc3257979142db8e484f0d9f3fdba0a633acce9f3343b528a19f8f303a061a28f3dd8da29ac1fa5151c2bd85652fb918f488e2caaaabb8412f546516d0c19d0654dc138f94ee23ba426fad34a046523c4f9b41e37cec3cc3154bfcceb9903395e708870cd668004a40a8a1486b2e49edf69fc0fe6aa7ec4932d9305916eb67b86508fd11d5b687c998af046a4ffc9067c85266a73573a11af62250e5710"], 0x1c}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) (async) dup(r0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="765b00004b94ca766ea4b122b75416330d1000184cb3fe8ce26317edee4b94cd3b47603848e2e7fdaa5ac87d7b5853c9b51fc65ac45d6be552921165a886889e2f27881d27911a2aab851ff399", @ANYRESHEX=r3, @ANYBLOB="01000000c49f7b2e000005000000050052fe51b500002a29bbcd640d3813da145fc3257979142db8e484f0d9f3fdba0a633acce9f3343b528a19f8f303a061a28f3dd8da29ac1fa5151c2bd85652fb918f488e2caaaabb8412f546516d0c19d0654dc138f94ee23ba426fad34a046523c4f9b41e37cec3cc3154bfcceb9903395e708870cd668004a40a8a1486b2e49edf69fc0fe6aa7ec4932d9305916eb67b86508fd11d5b687c998af046a4ffc9067c85266a73573a11af62250e5710"], 0x1c}}, 0x0) (async) 23:06:36 executing program 4: socketpair(0x2, 0x3, 0x0, &(0x7f0000000000)) 23:06:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x0, 0x3, 0x4}) 23:06:36 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x5ce, 0x80800}) [ 1267.489137] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1267.496394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1267.503675] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 [ 1267.559709] FAULT_INJECTION: forcing a failure. [ 1267.559709] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.618774] CPU: 0 PID: 31462 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1267.626702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1267.636069] Call Trace: [ 1267.638676] dump_stack+0x1b2/0x281 [ 1267.642327] should_fail.cold+0x10a/0x149 [ 1267.646499] should_failslab+0xd6/0x130 [ 1267.650514] __kmalloc_track_caller+0x2bc/0x400 [ 1267.655205] ? dccp_feat_clone_sp_val.part.0+0x4a/0xd0 [ 1267.660505] kmemdup+0x23/0x50 [ 1267.663717] dccp_feat_clone_sp_val.part.0+0x4a/0xd0 [ 1267.668839] __feat_register_sp+0x19d/0x490 [ 1267.673172] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1267.677769] ? _raw_spin_unlock+0x31/0x40 [ 1267.681961] dccp_feat_init+0x238/0x6b0 [ 1267.685951] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1267.691084] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1267.696114] ? init_timer_key+0x68/0x300 [ 1267.700190] ? __lockdep_init_map+0x100/0x560 [ 1267.704704] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1267.710526] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1267.716340] ? compat_dccp_setsockopt+0x70/0x70 [ 1267.721148] dccp_init_sock+0x2f1/0x3c0 [ 1267.725146] dccp_v6_init_sock+0x1a/0x80 [ 1267.729251] ? dccp_v6_rcv+0x1590/0x1590 [ 1267.733303] inet6_create+0x8f1/0xe20 [ 1267.737094] __sock_create+0x303/0x620 [ 1267.740973] SyS_socketpair+0x159/0x480 [ 1267.744936] ? SyS_socket+0x1b0/0x1b0 [ 1267.748741] ? SyS_read+0x210/0x210 [ 1267.752355] ? __do_page_fault+0x159/0xad0 [ 1267.756580] ? do_syscall_64+0x4c/0x640 [ 1267.760560] ? SyS_socket+0x1b0/0x1b0 [ 1267.764351] do_syscall_64+0x1d5/0x640 [ 1267.768237] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1267.773413] RIP: 0033:0x7fbc383ab0f9 [ 1267.777141] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1267.784838] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1267.792098] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1267.799362] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1267.806617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1267.813885] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 23:06:37 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r1) r3 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00005e850000000000000300000014000200776730000000000000000000000000000900030073797a310000000089"], 0x34}}, 0x1) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4051) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00000005000000050021e600170000"], 0x1c}}, 0x0) 23:06:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x10000, 0x8009, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:37 executing program 4: socketpair(0x2, 0x3, 0x0, &(0x7f0000000000)) 23:06:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}}, 0x20000861) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:37 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 18) 23:06:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r1) r3 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, 0x0, 0x80) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00005e850000000000000300000014000200776730000000000000000000000000000900030073797a310000000089"], 0x34}}, 0x1) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4051) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00000005000000050021e600170000"], 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00000005000000050021e600170000"], 0x1c}}, 0x0) 23:06:37 executing program 4: socketpair(0x2, 0x3, 0x9, 0x0) 23:06:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}}, 0x20000861) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) [ 1268.168772] FAULT_INJECTION: forcing a failure. [ 1268.168772] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.201025] CPU: 0 PID: 31493 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1268.209060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1268.218428] Call Trace: [ 1268.221033] dump_stack+0x1b2/0x281 [ 1268.224685] should_fail.cold+0x10a/0x149 [ 1268.228856] should_failslab+0xd6/0x130 [ 1268.232849] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1268.237541] dccp_feat_entry_new+0x173/0x350 [ 1268.241969] __feat_register_sp+0x1c9/0x490 [ 1268.246412] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1268.251053] ? _raw_spin_unlock+0x31/0x40 [ 1268.255225] dccp_feat_init+0x238/0x6b0 [ 1268.259277] ? dccp_feat_parse_options+0x1e40/0x1e40 23:06:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x10000, 0x8009, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}}, 0x20000861) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}}, 0x20000861) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) [ 1268.264494] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1268.269536] ? init_timer_key+0x68/0x300 [ 1268.273718] ? __lockdep_init_map+0x100/0x560 [ 1268.278237] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1268.284059] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1268.289880] ? compat_dccp_setsockopt+0x70/0x70 [ 1268.294590] dccp_init_sock+0x2f1/0x3c0 [ 1268.298598] dccp_v6_init_sock+0x1a/0x80 [ 1268.302674] ? dccp_v6_rcv+0x1590/0x1590 [ 1268.306776] inet6_create+0x8f1/0xe20 [ 1268.310619] __sock_create+0x303/0x620 [ 1268.314528] SyS_socketpair+0x159/0x480 23:06:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c5}, 0x20000001) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6d22}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000851}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) [ 1268.318518] ? SyS_socket+0x1b0/0x1b0 [ 1268.322333] ? SyS_read+0x210/0x210 [ 1268.325978] ? __do_page_fault+0x159/0xad0 [ 1268.330228] ? do_syscall_64+0x4c/0x640 [ 1268.334231] ? SyS_socket+0x1b0/0x1b0 [ 1268.338060] do_syscall_64+0x1d5/0x640 [ 1268.341968] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1268.347175] RIP: 0033:0x7fbc383ab0f9 [ 1268.350894] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1268.358614] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1268.365898] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1268.373177] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.380459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1268.387743] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 23:06:38 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r1) (async) r3 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00005e850000000000000300000014000200776730000000000000000000000000000900030073797a310000000089"], 0x34}}, 0x1) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4051) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00000005000000050021e600170000"], 0x1c}}, 0x0) 23:06:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x10000, 0x8009, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:38 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x10000, 0x8009, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:38 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 19) 23:06:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c5}, 0x20000001) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6d22}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000851}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) [ 1269.035995] FAULT_INJECTION: forcing a failure. [ 1269.035995] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.061254] CPU: 1 PID: 31539 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1269.069625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1269.078988] Call Trace: [ 1269.081590] dump_stack+0x1b2/0x281 [ 1269.085237] should_fail.cold+0x10a/0x149 [ 1269.089401] should_failslab+0xd6/0x130 [ 1269.093392] __kmalloc_track_caller+0x2bc/0x400 [ 1269.098082] ? dccp_feat_clone_sp_val.part.0+0x4a/0xd0 [ 1269.103420] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1269.108280] kmemdup+0x23/0x50 [ 1269.111488] dccp_feat_clone_sp_val.part.0+0x4a/0xd0 [ 1269.116616] __feat_register_sp+0x19d/0x490 [ 1269.120954] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1269.125555] ? _raw_spin_unlock+0x31/0x40 [ 1269.129720] dccp_feat_init+0x266/0x6b0 [ 1269.133720] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1269.138834] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1269.143865] ? init_timer_key+0x68/0x300 [ 1269.147941] ? __lockdep_init_map+0x100/0x560 [ 1269.152453] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1269.158264] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1269.164079] ? compat_dccp_setsockopt+0x70/0x70 [ 1269.168767] dccp_init_sock+0x2f1/0x3c0 [ 1269.172756] dccp_v6_init_sock+0x1a/0x80 [ 1269.176829] ? dccp_v6_rcv+0x1590/0x1590 [ 1269.180904] inet6_create+0x8f1/0xe20 23:06:38 executing program 4: socketpair(0x2, 0x3, 0x0, &(0x7f0000000000)) 23:06:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661ff}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x56}, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) 23:06:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xce}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c5}, 0x20000001) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6d22}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000851}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c5}, 0x20000001) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6d22}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000851}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 23:06:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xce}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) [ 1269.184738] __sock_create+0x303/0x620 [ 1269.188646] SyS_socketpair+0x159/0x480 [ 1269.192639] ? SyS_socket+0x1b0/0x1b0 [ 1269.196460] ? SyS_read+0x210/0x210 [ 1269.200131] ? __do_page_fault+0x159/0xad0 [ 1269.204377] ? do_syscall_64+0x4c/0x640 [ 1269.208364] ? SyS_socket+0x1b0/0x1b0 [ 1269.212178] do_syscall_64+0x1d5/0x640 [ 1269.216086] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1269.221283] RIP: 0033:0x7fbc383ab0f9 [ 1269.225004] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 23:06:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00+\\', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500220001000000"], 0x1c}}, 0x0) [ 1269.232735] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1269.240027] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1269.247313] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1269.254615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1269.261898] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 23:06:39 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(0xffffffffffffffff) r3 = dup(r2) recvfrom$l2tp(r3, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661ff}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x56}, 0x8) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) 23:06:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00+\\', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500220001000000"], 0x1c}}, 0x0) 23:06:39 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 20) 23:06:39 executing program 4: socketpair(0x2, 0x3, 0x0, &(0x7f0000000000)) 23:06:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xce}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) [ 1269.927319] FAULT_INJECTION: forcing a failure. [ 1269.927319] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.940131] CPU: 1 PID: 31593 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1269.948045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1269.957412] Call Trace: [ 1269.960025] dump_stack+0x1b2/0x281 [ 1269.963679] should_fail.cold+0x10a/0x149 [ 1269.967859] should_failslab+0xd6/0x130 [ 1269.971856] kmem_cache_alloc_trace+0x29a/0x3d0 23:06:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661ff}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x56}, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661ff}) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x56}, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) [ 1269.976554] dccp_feat_entry_new+0x173/0x350 [ 1269.980991] __feat_register_sp+0x1c9/0x490 [ 1269.985355] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1269.989955] ? _raw_spin_unlock+0x31/0x40 [ 1269.994121] dccp_feat_init+0x266/0x6b0 [ 1269.998114] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1270.003232] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1270.008263] ? init_timer_key+0x68/0x300 [ 1270.012339] ? __lockdep_init_map+0x100/0x560 [ 1270.016850] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 23:06:39 executing program 1: socketpair(0x23, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x6, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7, 0x10, 0xd1, 0x5, {{0x1d, 0x4, 0x3, 0x7, 0x74, 0x66, 0x0, 0x9, 0x2, 0x0, @multicast2, @private=0xa010100, {[@rr={0x7, 0x23, 0xbf, [@broadcast, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x27}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x37, 0x3, [{0x7, 0x12, "4e9bd80d367c21aef6a4d67ec6b558c8"}, {0x2, 0x5, "7a9192"}, {0x6, 0x10, "dce4a38ceaf27dcefe803a3ef69c"}, {0x5, 0xa, "a6252919251744b2"}]}]}}}}}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x4, 0x0, 0x1}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x6, 0xef7f1e47d9392230) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40403, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd3000ffdbdf25010000000900030073797a31000000000900010073797a3200c7000005000400010000000900010073797a30000000001400020076657468305f766972745f77696669000900010073797a3200000000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004004) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) [ 1270.022662] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1270.028505] ? compat_dccp_setsockopt+0x70/0x70 [ 1270.033204] dccp_init_sock+0x2f1/0x3c0 [ 1270.037194] dccp_v6_init_sock+0x1a/0x80 [ 1270.041269] ? dccp_v6_rcv+0x1590/0x1590 [ 1270.045360] inet6_create+0x8f1/0xe20 [ 1270.049180] __sock_create+0x303/0x620 [ 1270.053091] SyS_socketpair+0x159/0x480 [ 1270.057082] ? SyS_socket+0x1b0/0x1b0 [ 1270.060900] ? SyS_read+0x210/0x210 [ 1270.064543] ? __do_page_fault+0x159/0xad0 [ 1270.068798] ? do_syscall_64+0x4c/0x640 [ 1270.072787] ? SyS_socket+0x1b0/0x1b0 23:06:39 executing program 1: socketpair(0x23, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x22, 0x6, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7, 0x10, 0xd1, 0x5, {{0x1d, 0x4, 0x3, 0x7, 0x74, 0x66, 0x0, 0x9, 0x2, 0x0, @multicast2, @private=0xa010100, {[@rr={0x7, 0x23, 0xbf, [@broadcast, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x27}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x37, 0x3, [{0x7, 0x12, "4e9bd80d367c21aef6a4d67ec6b558c8"}, {0x2, 0x5, "7a9192"}, {0x6, 0x10, "dce4a38ceaf27dcefe803a3ef69c"}, {0x5, 0xa, "a6252919251744b2"}]}]}}}}}) (async, rerun: 64) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x4, 0x0, 0x1}) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x6, 0xef7f1e47d9392230) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40403, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd3000ffdbdf25010000000900030073797a31000000000900010073797a3200c7000005000400010000000900010073797a30000000001400020076657468305f766972745f77696669000900010073797a3200000000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004004) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) [ 1270.076603] do_syscall_64+0x1d5/0x640 [ 1270.080516] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1270.085714] RIP: 0033:0x7fbc383ab0f9 [ 1270.089440] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1270.097166] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1270.104457] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1270.111764] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1270.119049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:06:39 executing program 4: socketpair(0x2, 0x3, 0x0, &(0x7f0000000000)) 23:06:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00+\\', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500220001000000"], 0x1c}}, 0x0) [ 1270.126366] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 23:06:40 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(0xffffffffffffffff) r3 = dup(r2) recvfrom$l2tp(r3, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:40 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 21) 23:06:40 executing program 1: socketpair(0x23, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket(0x22, 0x6, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7, 0x10, 0xd1, 0x5, {{0x1d, 0x4, 0x3, 0x7, 0x74, 0x66, 0x0, 0x9, 0x2, 0x0, @multicast2, @private=0xa010100, {[@rr={0x7, 0x23, 0xbf, [@broadcast, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x27}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x37, 0x3, [{0x7, 0x12, "4e9bd80d367c21aef6a4d67ec6b558c8"}, {0x2, 0x5, "7a9192"}, {0x6, 0x10, "dce4a38ceaf27dcefe803a3ef69c"}, {0x5, 0xa, "a6252919251744b2"}]}]}}}}}) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x4, 0x0, 0x1}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x6, 0xef7f1e47d9392230) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40403, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd3000ffdbdf25010000000900030073797a31000000000900010073797a3200c7000005000400010000000900010073797a30000000001400020076657468305f766972745f77696669000900010073797a3200000000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004004) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:40 executing program 4: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 23:06:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x2a}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4008004) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) 23:06:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) [ 1270.806945] FAULT_INJECTION: forcing a failure. [ 1270.806945] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.828264] CPU: 1 PID: 31639 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1270.836185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1270.845552] Call Trace: [ 1270.848159] dump_stack+0x1b2/0x281 [ 1270.851806] should_fail.cold+0x10a/0x149 [ 1270.855976] should_failslab+0xd6/0x130 [ 1270.859981] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1270.864669] ccid_get_builtin_ccids+0x6b/0x1c0 [ 1270.869258] dccp_feat_init+0x2be/0x6b0 [ 1270.873287] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1270.878408] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1270.883435] ? init_timer_key+0x68/0x300 [ 1270.887514] ? __lockdep_init_map+0x100/0x560 [ 1270.892113] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1270.897927] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 23:06:40 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x402280) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x4d, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@broadcast}}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x4) [ 1270.903741] ? compat_dccp_setsockopt+0x70/0x70 [ 1270.908430] dccp_init_sock+0x2f1/0x3c0 [ 1270.912424] dccp_v6_init_sock+0x1a/0x80 [ 1270.916503] ? dccp_v6_rcv+0x1590/0x1590 [ 1270.920574] inet6_create+0x8f1/0xe20 [ 1270.924405] __sock_create+0x303/0x620 [ 1270.928320] SyS_socketpair+0x159/0x480 [ 1270.932311] ? SyS_socket+0x1b0/0x1b0 [ 1270.936122] ? SyS_read+0x210/0x210 [ 1270.939758] ? __do_page_fault+0x159/0xad0 [ 1270.944005] ? do_syscall_64+0x4c/0x640 [ 1270.947992] ? SyS_socket+0x1b0/0x1b0 [ 1270.951801] do_syscall_64+0x1d5/0x640 23:06:40 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x402280) (async) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x4d, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@broadcast}}) (async) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x4) [ 1270.955708] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1270.960954] RIP: 0033:0x7fbc383ab0f9 [ 1270.964673] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1270.972389] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1270.979670] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1270.986954] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1270.994341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:06:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x2a}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4008004) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x2a}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4008004) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) (async) 23:06:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:40 executing program 4: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) [ 1271.001627] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 23:06:40 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x402280) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x4d, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@broadcast}}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x402280) (async) syz_open_dev$mouse(&(0x7f0000000100), 0x4d, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@broadcast}}) (async) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x4) (async) 23:06:40 executing program 4: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 23:06:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c008000", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:06:40 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(0xffffffffffffffff) r3 = dup(r2) recvfrom$l2tp(r3, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:40 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 22) 23:06:40 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x2a}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4008004) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x2a}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4008004) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) 23:06:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c008000", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:06:41 executing program 4: socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) 23:06:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40002}, 0x804) 23:06:41 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c008000", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) [ 1271.740561] FAULT_INJECTION: forcing a failure. [ 1271.740561] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.797197] CPU: 1 PID: 31698 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1271.805124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1271.814510] Call Trace: [ 1271.817117] dump_stack+0x1b2/0x281 [ 1271.820766] should_fail.cold+0x10a/0x149 [ 1271.824949] should_failslab+0xd6/0x130 [ 1271.828957] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1271.833650] ccid_get_builtin_ccids+0x6b/0x1c0 [ 1271.838253] dccp_feat_init+0x2e4/0x6b0 [ 1271.842253] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1271.847381] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1271.852410] ? init_timer_on_stack_key+0x82/0xa0 [ 1271.857176] ? __lockdep_init_map+0x100/0x560 [ 1271.861684] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1271.867496] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1271.873310] ? compat_dccp_setsockopt+0x70/0x70 [ 1271.877996] dccp_init_sock+0x2f1/0x3c0 [ 1271.881988] dccp_v6_init_sock+0x1a/0x80 [ 1271.886067] ? dccp_v6_rcv+0x1590/0x1590 [ 1271.890146] inet6_create+0x8f1/0xe20 [ 1271.893978] __sock_create+0x303/0x620 [ 1271.897887] SyS_socketpair+0x159/0x480 [ 1271.901867] ? SyS_socket+0x1b0/0x1b0 [ 1271.905662] ? SyS_read+0x210/0x210 [ 1271.909296] ? __do_page_fault+0x159/0xad0 [ 1271.913525] ? do_syscall_64+0x4c/0x640 [ 1271.917498] ? SyS_socket+0x1b0/0x1b0 [ 1271.921289] do_syscall_64+0x1d5/0x640 [ 1271.925187] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1271.930365] RIP: 0033:0x7fbc383ab0f9 [ 1271.934065] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 23:06:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES64=r2], 0x1c}}, 0x4000) 23:06:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40002}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40002}, 0x804) (async) 23:06:41 executing program 4: socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) [ 1271.941761] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1271.949022] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1271.956282] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.963540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1271.970799] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 23:06:41 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) dup(r1) r2 = dup(0xffffffffffffffff) recvfrom$l2tp(r2, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:41 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:41 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 23) 23:06:41 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES64=r2], 0x1c}}, 0x4000) 23:06:41 executing program 4: socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) 23:06:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40002}, 0x804) (rerun: 64) 23:06:41 executing program 4: socketpair(0x2, 0x3, 0x0, 0x0) [ 1272.604088] FAULT_INJECTION: forcing a failure. [ 1272.604088] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.617198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1272.654193] CPU: 0 PID: 31743 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1272.662126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1272.671494] Call Trace: [ 1272.674101] dump_stack+0x1b2/0x281 [ 1272.677759] should_fail.cold+0x10a/0x149 [ 1272.681932] should_failslab+0xd6/0x130 [ 1272.685926] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1272.690617] ccid_get_builtin_ccids+0x6b/0x1c0 [ 1272.695221] dccp_feat_init+0x2e4/0x6b0 [ 1272.699217] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1272.704446] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1272.709480] ? init_timer_on_stack_key+0x82/0xa0 [ 1272.714258] ? __lockdep_init_map+0x100/0x560 [ 1272.718774] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1272.724593] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1272.730416] ? compat_dccp_setsockopt+0x70/0x70 [ 1272.735107] dccp_init_sock+0x2f1/0x3c0 [ 1272.739104] dccp_v6_init_sock+0x1a/0x80 [ 1272.743178] ? dccp_v6_rcv+0x1590/0x1590 [ 1272.747252] inet6_create+0x8f1/0xe20 [ 1272.751076] __sock_create+0x303/0x620 [ 1272.754985] SyS_socketpair+0x159/0x480 [ 1272.758981] ? SyS_socket+0x1b0/0x1b0 [ 1272.762800] ? SyS_read+0x210/0x210 [ 1272.766444] ? __do_page_fault+0x159/0xad0 [ 1272.770697] ? do_syscall_64+0x4c/0x640 [ 1272.774694] ? SyS_socket+0x1b0/0x1b0 [ 1272.778516] do_syscall_64+0x1d5/0x640 [ 1272.782439] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1272.787646] RIP: 0033:0x7fbc383ab0f9 [ 1272.791366] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 23:06:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f00000000c0)='%,\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x0, 0xd8, 0x100}) 23:06:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES64=r2], 0x1c}}, 0x4000) 23:06:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f00000000c0)='%,\x00') (async) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f00000000c0)='%,\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x0, 0xd8, 0x100}) 23:06:42 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f00000000c0)='%,\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x0, 0xd8, 0x100}) 23:06:42 executing program 4: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) [ 1272.799177] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1272.806470] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1272.813752] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.821041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1272.828325] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 23:06:42 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 24) 23:06:42 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) dup(r1) r2 = dup(0xffffffffffffffff) recvfrom$l2tp(r2, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x3dc68b7}) r1 = dup(r0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x81) 23:06:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4c800) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="765b00004b94ca766ea4b122b75416330d1000184cb3fe8ce26317edee4b94cd3b47603848e2e7fdaa5ac87d7b5853c9b51fc65ac45d6be552921165a886889e2f27881d27911a2aab851ff399", @ANYRESHEX=r3, @ANYBLOB="01000000c49f7b2e000005000000050052fe51b500002a29bbcd640d3813da145fc3257979142db8e484f0d9f3fdba0a633acce9f3343b528a19f8f303a061a28f3dd8da29ac1fa5151c2bd85652fb918f488e2caaaabb8412f546516d0c19d0654dc138f94ee23ba426fad34a046523c4f9b41e37cec3cc3154bfcceb9903395e708870cd668004a40a8a1486b2e49edf69fc0fe6aa7ec4932d9305916eb67b86508fd11d5b687c998af046a4ffc9067c85266a73573a11af62250e5710"], 0x1c}}, 0x0) 23:06:42 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1f, 0x4c0902) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc80d0}, 0x800) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x3dc68b7}) r1 = dup(r0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x81) 23:06:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="765b00004b94ca766ea4b122b75416330d1000184cb3fe8ce26317edee4b94cd3b47603848e2e7fdaa5ac87d7b5853c9b51fc65ac45d6be552921165a886889e2f27881d27911a2aab851ff399", @ANYRESHEX=r3, @ANYBLOB="01000000c49f7b2e000005000000050052fe51b500002a29bbcd640d3813da145fc3257979142db8e484f0d9f3fdba0a633acce9f3343b528a19f8f303a061a28f3dd8da29ac1fa5151c2bd85652fb918f488e2caaaabb8412f546516d0c19d0654dc138f94ee23ba426fad34a046523c4f9b41e37cec3cc3154bfcceb9903395e708870cd668004a40a8a1486b2e49edf69fc0fe6aa7ec4932d9305916eb67b86508fd11d5b687c998af046a4ffc9067c85266a73573a11af62250e5710"], 0x1c}}, 0x0) 23:06:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4c800) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) [ 1273.500107] FAULT_INJECTION: forcing a failure. [ 1273.500107] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.546220] CPU: 0 PID: 31790 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1273.554156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1273.563613] Call Trace: [ 1273.566569] dump_stack+0x1b2/0x281 [ 1273.570215] should_fail.cold+0x10a/0x149 [ 1273.574385] should_failslab+0xd6/0x130 [ 1273.578378] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1273.583073] dccp_feat_entry_new+0x173/0x350 [ 1273.587501] __feat_register_sp+0x1c9/0x490 [ 1273.591842] ? dccp_feat_reconcile+0x3d0/0x3d0 23:06:42 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1f, 0x4c0902) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc80d0}, 0x800) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x3dc68b7}) r1 = dup(r0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x81) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x3dc68b7}) (async) dup(r0) (async) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x81) (async) 23:06:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4c800) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:42 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 25) [ 1273.596451] ? ccid_get_builtin_ccids+0x155/0x1c0 [ 1273.601340] dccp_feat_init+0x5ce/0x6b0 [ 1273.605362] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1273.610492] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1273.610506] ? init_timer_on_stack_key+0x82/0xa0 [ 1273.610519] ? __lockdep_init_map+0x100/0x560 [ 1273.610536] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1273.610547] ? compat_dccp_setsockopt+0x70/0x70 [ 1273.610576] dccp_init_sock+0x2f1/0x3c0 [ 1273.610593] dccp_v6_init_sock+0x1a/0x80 [ 1273.610605] ? dccp_v6_rcv+0x1590/0x1590 [ 1273.610617] inet6_create+0x8f1/0xe20 [ 1273.610642] __sock_create+0x303/0x620 [ 1273.610660] SyS_socketpair+0x159/0x480 [ 1273.610673] ? SyS_socket+0x1b0/0x1b0 [ 1273.610687] ? SyS_read+0x210/0x210 [ 1273.610700] ? __do_page_fault+0x159/0xad0 [ 1273.610713] ? do_syscall_64+0x4c/0x640 [ 1273.610729] ? SyS_socket+0x1b0/0x1b0 [ 1273.610743] do_syscall_64+0x1d5/0x640 [ 1273.610763] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1273.610782] RIP: 0033:0x7fbc383ab0f9 [ 1273.610789] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1273.610802] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1273.610809] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1273.610816] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1273.610823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1273.610830] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 [ 1273.737875] FAULT_INJECTION: forcing a failure. [ 1273.737875] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.737889] CPU: 0 PID: 31826 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1273.737897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1273.737902] Call Trace: [ 1273.737919] dump_stack+0x1b2/0x281 [ 1273.737939] should_fail.cold+0x10a/0x149 [ 1273.737957] should_failslab+0xd6/0x130 [ 1273.737975] __kmalloc_track_caller+0x2bc/0x400 [ 1273.737988] ? dccp_feat_clone_sp_val.part.0+0x4a/0xd0 [ 1273.738001] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1273.738016] kmemdup+0x23/0x50 [ 1273.738030] dccp_feat_clone_sp_val.part.0+0x4a/0xd0 [ 1273.738044] __feat_register_sp+0x19d/0x490 [ 1273.738061] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1273.738075] ? ccid_get_builtin_ccids+0x155/0x1c0 [ 1273.738089] dccp_feat_init+0x600/0x6b0 [ 1273.738106] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1273.738120] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1273.738132] ? init_timer_on_stack_key+0x82/0xa0 [ 1273.738145] ? __lockdep_init_map+0x100/0x560 [ 1273.738160] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1273.738172] ? compat_dccp_setsockopt+0x70/0x70 [ 1273.738187] dccp_init_sock+0x2f1/0x3c0 [ 1273.738202] dccp_v6_init_sock+0x1a/0x80 [ 1273.738214] ? dccp_v6_rcv+0x1590/0x1590 [ 1273.738225] inet6_create+0x8f1/0xe20 [ 1273.738245] __sock_create+0x303/0x620 [ 1273.738273] SyS_socketpair+0x159/0x480 [ 1273.738288] ? SyS_socket+0x1b0/0x1b0 [ 1273.738302] ? SyS_read+0x210/0x210 [ 1273.738315] ? __do_page_fault+0x159/0xad0 [ 1273.738327] ? do_syscall_64+0x4c/0x640 [ 1273.738338] ? SyS_socket+0x1b0/0x1b0 [ 1273.738355] do_syscall_64+0x1d5/0x640 [ 1273.738376] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1273.738386] RIP: 0033:0x7fbc383ab0f9 [ 1273.738393] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1273.738406] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1273.738413] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1273.738420] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1273.738427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1273.738434] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 23:06:43 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) dup(r1) r2 = dup(0xffffffffffffffff) recvfrom$l2tp(r2, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x7, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0xc080) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r3 = socket(0x1, 0x1, 0x200) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008840) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fc, 0x0, 0x0, 0x84880}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) 23:06:43 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 26) 23:06:43 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1f, 0x4c0902) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc80d0}, 0x800) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:43 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="765b00004b94ca766ea4b122b75416330d1000184cb3fe8ce26317edee4b94cd3b47603848e2e7fdaa5ac87d7b5853c9b51fc65ac45d6be552921165a886889e2f27881d27911a2aab851ff399", @ANYRESHEX=r3, @ANYBLOB="01000000c49f7b2e000005000000050052fe51b500002a29bbcd640d3813da145fc3257979142db8e484f0d9f3fdba0a633acce9f3343b528a19f8f303a061a28f3dd8da29ac1fa5151c2bd85652fb918f488e2caaaabb8412f546516d0c19d0654dc138f94ee23ba426fad34a046523c4f9b41e37cec3cc3154bfcceb9903395e708870cd668004a40a8a1486b2e49edf69fc0fe6aa7ec4932d9305916eb67b86508fd11d5b687c998af046a4ffc9067c85266a73573a11af62250e5710"], 0x1c}}, 0x0) 23:06:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) [ 1274.385551] FAULT_INJECTION: forcing a failure. [ 1274.385551] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.407936] CPU: 1 PID: 31838 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 1274.415872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1274.425238] Call Trace: [ 1274.427849] dump_stack+0x1b2/0x281 [ 1274.431498] should_fail.cold+0x10a/0x149 23:06:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) [ 1274.435668] should_failslab+0xd6/0x130 [ 1274.439663] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1274.444355] dccp_feat_entry_new+0x173/0x350 [ 1274.448786] __feat_register_sp+0x1c9/0x490 [ 1274.453131] ? dccp_feat_reconcile+0x3d0/0x3d0 [ 1274.457731] ? ccid_get_builtin_ccids+0x155/0x1c0 [ 1274.462595] dccp_feat_init+0x600/0x6b0 [ 1274.466588] ? dccp_feat_parse_options+0x1e40/0x1e40 [ 1274.471722] ? rcu_read_lock_sched_held+0x100/0x1d0 [ 1274.476750] ? init_timer_on_stack_key+0x82/0xa0 [ 1274.481519] ? __lockdep_init_map+0x100/0x560 23:06:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:06:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000400", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) [ 1274.486119] ? do_dccp_setsockopt.constprop.0.cold+0x40/0x40 [ 1274.491930] ? compat_dccp_setsockopt+0x70/0x70 [ 1274.496612] dccp_init_sock+0x2f1/0x3c0 [ 1274.500602] dccp_v6_init_sock+0x1a/0x80 [ 1274.504690] ? dccp_v6_rcv+0x1590/0x1590 [ 1274.508758] inet6_create+0x8f1/0xe20 [ 1274.512575] __sock_create+0x303/0x620 [ 1274.516486] SyS_socketpair+0x159/0x480 [ 1274.520473] ? SyS_socket+0x1b0/0x1b0 [ 1274.524292] ? SyS_read+0x210/0x210 [ 1274.528042] ? __do_page_fault+0x159/0xad0 [ 1274.532290] ? do_syscall_64+0x4c/0x640 23:06:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000400", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:06:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000400", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) [ 1274.536374] ? SyS_socket+0x1b0/0x1b0 [ 1274.540196] do_syscall_64+0x1d5/0x640 [ 1274.544108] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1274.549307] RIP: 0033:0x7fbc383ab0f9 [ 1274.553023] RSP: 002b:00007fbc3691d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1274.560745] RAX: ffffffffffffffda RBX: 00007fbc384caf80 RCX: 00007fbc383ab0f9 [ 1274.568027] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1274.575358] RBP: 00007fbc3691d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1274.582638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1274.590097] R13: 00007ffeefa0216f R14: 00007fbc3691d300 R15: 0000000000022000 23:06:44 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) dup(r2) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c589d00", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:06:44 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x7, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0xc080) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r3 = socket(0x1, 0x1, 0x200) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008840) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fc, 0x0, 0x0, 0x84880}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x7, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0xc080) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) socket(0x1, 0x1, 0x200) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008840) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fc, 0x0, 0x0, 0x84880}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) (async) 23:06:44 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (fail_nth: 27) 23:06:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x7, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0xc080) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) r3 = socket(0x1, 0x1, 0x200) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008840) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fc, 0x0, 0x0, 0x84880}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) 23:06:44 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:44 executing program 3: socketpair(0xa, 0x1, 0x4, 0x0) 23:06:44 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c589d00", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:06:44 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:45 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) dup(r2) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c589d00", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c589d00", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) (async) 23:06:45 executing program 1: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x0, 0x8, 0x8}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIONCLEX(r0, 0x5450) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x80) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000180)={r2, 0x3}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x93c) 23:06:45 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:45 executing program 3: socketpair(0xa, 0x1, 0x4, 0x0) 23:06:45 executing program 1: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x0, 0x8, 0x8}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIONCLEX(r0, 0x5450) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x80) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000180)={r2, 0x3}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x93c) 23:06:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:45 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x8010) 23:06:45 executing program 3: socketpair(0xa, 0x1, 0x4, 0x0) 23:06:45 executing program 1: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x0, 0x8, 0x8}) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x0, 0x8, 0x8}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIONCLEX(r0, 0x5450) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x80) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000180)={r2, 0x3}) (async) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000180)={r2, 0x3}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x93c) 23:06:46 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) dup(r2) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:46 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x8010) 23:06:46 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x5, 0xfffffff9, 0x100, 0xff, 0x9, 0x5, 0x6, 0x1f, 0x1, 0xfd, 0x81, "4f3a2c8932b111a1d37aec2dcaf4a82d9d090f121fbc458be69c37eb14f7dfa7"}) 23:06:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661ff, 0xffffd, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 23:06:46 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x8010) 23:06:46 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x5, 0xfffffff9, 0x100, 0xff, 0x9, 0x5, 0x6, 0x1f, 0x1, 0xfd, 0x81, "4f3a2c8932b111a1d37aec2dcaf4a82d9d090f121fbc458be69c37eb14f7dfa7"}) 23:06:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661ff, 0xffffd, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 23:06:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES16=r3, @ANYBLOB="010000000000737ba5c19effe219b55aa2a6ccb7000000126bdb3400000000"], 0x1c}}, 0x0) 23:06:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x20040010) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}]}, 0x1c}}, 0x0) 23:06:47 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:47 executing program 4: syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:47 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x5, 0xfffffff9, 0x100, 0xff, 0x9, 0x5, 0x6, 0x1f, 0x1, 0xfd, 0x81, "4f3a2c8932b111a1d37aec2dcaf4a82d9d090f121fbc458be69c37eb14f7dfa7"}) 23:06:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf7e51b58ec661ff, 0xffffd, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 23:06:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES16=r3, @ANYBLOB="010000000000737ba5c19effe219b55aa2a6ccb7000000126bdb3400000000"], 0x1c}}, 0x0) 23:06:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x20040010) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}]}, 0x1c}}, 0x0) 23:06:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x20040010) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}]}, 0x1c}}, 0x0) 23:06:47 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:47 executing program 3: socketpair(0xa, 0xa, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="200029bd7000fbdbdf25056995a28630099600000014002000ff020000000000000000000000000001050004000200000006001d0000010000", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x38}}, 0x41) 23:06:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x2, 0x9a, {{0x3e, 0x4, 0x1, 0x3f, 0xf8, 0x68, 0x0, 0xb3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x10, 0x93, 0x0, 0x8, [0x9, 0x5, 0xff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xb4, [@remote, @multicast2]}, @ssrr={0x89, 0xf, 0x28, [@dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @local]}, @ssrr={0x89, 0x17, 0x3c, [@multicast2, @remote, @rand_addr=0x64010101, @remote, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x34, 0xfd, 0x1, 0x8, [{@empty, 0x2}, {@local, 0xda24}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8203}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}}, {@local, 0xffff}]}, @timestamp_addr={0x44, 0x3c, 0xfb, 0x1, 0x7, [{@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1}, {@multicast1, 0x7fffffff}, {@multicast2, 0x80}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@remote, 0x400}]}, @cipso={0x86, 0x2c, 0x3, [{0x1, 0x10, "a10bc465d2ea1b10bb030274dc1c"}, {0x2, 0xa, "0936c11f10cf09a2"}, {0x5, 0xc, "862ae39818f32e620c42"}]}]}}}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES16=r3, @ANYBLOB="010000000000737ba5c19effe219b55aa2a6ccb7000000126bdb3400000000"], 0x1c}}, 0x0) 23:06:47 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:48 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}}, 0x10) 23:06:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x2, 0x9a, {{0x3e, 0x4, 0x1, 0x3f, 0xf8, 0x68, 0x0, 0xb3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x10, 0x93, 0x0, 0x8, [0x9, 0x5, 0xff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xb4, [@remote, @multicast2]}, @ssrr={0x89, 0xf, 0x28, [@dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @local]}, @ssrr={0x89, 0x17, 0x3c, [@multicast2, @remote, @rand_addr=0x64010101, @remote, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x34, 0xfd, 0x1, 0x8, [{@empty, 0x2}, {@local, 0xda24}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8203}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}}, {@local, 0xffff}]}, @timestamp_addr={0x44, 0x3c, 0xfb, 0x1, 0x7, [{@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1}, {@multicast1, 0x7fffffff}, {@multicast2, 0x80}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@remote, 0x400}]}, @cipso={0x86, 0x2c, 0x3, [{0x1, 0x10, "a10bc465d2ea1b10bb030274dc1c"}, {0x2, 0xa, "0936c11f10cf09a2"}, {0x5, 0xc, "862ae39818f32e620c42"}]}]}}}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x2, 0x9a, {{0x3e, 0x4, 0x1, 0x3f, 0xf8, 0x68, 0x0, 0xb3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x10, 0x93, 0x0, 0x8, [0x9, 0x5, 0xff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xb4, [@remote, @multicast2]}, @ssrr={0x89, 0xf, 0x28, [@dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @local]}, @ssrr={0x89, 0x17, 0x3c, [@multicast2, @remote, @rand_addr=0x64010101, @remote, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x34, 0xfd, 0x1, 0x8, [{@empty, 0x2}, {@local, 0xda24}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8203}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}}, {@local, 0xffff}]}, @timestamp_addr={0x44, 0x3c, 0xfb, 0x1, 0x7, [{@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1}, {@multicast1, 0x7fffffff}, {@multicast2, 0x80}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@remote, 0x400}]}, @cipso={0x86, 0x2c, 0x3, [{0x1, 0x10, "a10bc465d2ea1b10bb030274dc1c"}, {0x2, 0xa, "0936c11f10cf09a2"}, {0x5, 0xc, "862ae39818f32e620c42"}]}]}}}}}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) 23:06:48 executing program 3: socketpair(0xa, 0xa, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="200029bd7000fbdbdf25056995a28630099600000014002000ff020000000000000000000000000001050004000200000006001d0000010000", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x38}}, 0x41) 23:06:48 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:48 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x3ff, 0x400881) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x308, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x2a0, 0x8, 0x0, 0x1, [{0x29c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x34, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}}, 0x0) 23:06:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}}, 0x10) (async) 23:06:48 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x2, 0x9a, {{0x3e, 0x4, 0x1, 0x3f, 0xf8, 0x68, 0x0, 0xb3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x10, 0x93, 0x0, 0x8, [0x9, 0x5, 0xff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xb4, [@remote, @multicast2]}, @ssrr={0x89, 0xf, 0x28, [@dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @local]}, @ssrr={0x89, 0x17, 0x3c, [@multicast2, @remote, @rand_addr=0x64010101, @remote, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x34, 0xfd, 0x1, 0x8, [{@empty, 0x2}, {@local, 0xda24}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8203}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}}, {@local, 0xffff}]}, @timestamp_addr={0x44, 0x3c, 0xfb, 0x1, 0x7, [{@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1}, {@multicast1, 0x7fffffff}, {@multicast2, 0x80}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@remote, 0x400}]}, @cipso={0x86, 0x2c, 0x3, [{0x1, 0x10, "a10bc465d2ea1b10bb030274dc1c"}, {0x2, 0xa, "0936c11f10cf09a2"}, {0x5, 0xc, "862ae39818f32e620c42"}]}]}}}}}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:48 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x3ff, 0x400881) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x308, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x2a0, 0x8, 0x0, 0x1, [{0x29c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x34, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000080), 0x3ff, 0x400881) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x308, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x2a0, 0x8, 0x0, 0x1, [{0x29c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x34, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}}, 0x0) (async) 23:06:48 executing program 3: socketpair(0xa, 0xa, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="200029bd7000fbdbdf25056995a28630099600000014002000ff020000000000000000000000000001050004000200000006001d0000010000", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x38}}, 0x41) socketpair(0xa, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="200029bd7000fbdbdf25056995a28630099600000014002000ff020000000000000000000000000001050004000200000006001d0000010000", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x38}}, 0x41) (async) 23:06:48 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:49 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x2, 0x0, 0xe}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0xffffffffffffff76, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xb, 0xffe0}, {0x10, 0x8}, {0xc, 0xd}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040004) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x8c57184ef47c656e, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1e2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x1c800) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x7}) r5 = dup(r0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x500, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x41890) 23:06:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}}, 0x10) 23:06:49 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x3ff, 0x400881) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x308, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x2a0, 0x8, 0x0, 0x1, [{0x29c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x34, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}}, 0x0) 23:06:49 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:49 executing program 3: socketpair(0x5, 0x2, 0x4, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x308, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x800) socketpair(0x10, 0xa, 0x80000001, &(0x7f0000000000)) 23:06:49 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:49 executing program 3: socketpair(0x5, 0x2, 0x4, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x308, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x800) socketpair(0x10, 0xa, 0x80000001, &(0x7f0000000000)) 23:06:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x2, 0x0, 0xe}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0xffffffffffffff76, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xb, 0xffe0}, {0x10, 0x8}, {0xc, 0xd}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040004) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x8c57184ef47c656e, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1e2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x1c800) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x7}) (async) r5 = dup(r0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x500, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x41890) 23:06:49 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 23:06:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20002061}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24080094}, 0x8c1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e00000045913f1329492c5a74fab16b43f89f320fc6d08c88e1e0f5c6feb26437129f7f23615173418207566d83d7e81d3fe80a1764e0e00119e570", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4004800) 23:06:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x2, 0x0, 0xe}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0xffffffffffffff76, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xb, 0xffe0}, {0x10, 0x8}, {0xc, 0xd}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040004) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x8c57184ef47c656e, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1e2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x1c800) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x7}) r5 = dup(r0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x500, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x41890) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x2, 0x0, 0xe}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0xffffffffffffff76, &(0x7f0000000140)}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xb, 0xffe0}, {0x10, 0x8}, {0xc, 0xd}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040004) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x8c57184ef47c656e, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1e2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x1c800) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x1, 0x7}) (async) dup(r0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x500, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x41890) (async) 23:06:49 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x80) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001040)={0x14, 0x0, 0xc01}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)={0x4d8, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xfc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1726fec3ccb5e88a6d778aecb2703ec4"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0xa8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xffffffffffff0083}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_SEC_KEY={0xfc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "336829bb1c6d970fe25681f8107354fafc66c0b320facf100cb6855993c7dadb"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "db1a5f0218389d92c7ccd23771b998e2e7eeeaaed162ae1366eb84dcb501747c"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "60edea50e8ba0bf24528922bd915434e38cf42d75e5c033ec305ce43ab61e45b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e3ab443ec9911ff1fb6d8d91ffa92a4f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cc3439025078f2539049818681b8efae9ba7c2d2a36d0b82467aca77cf7c5000"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3876456e434f9c9d2933025e4a8e277e"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x204, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_ID={0xe4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1001f}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x64, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6d}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}]}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8627c2ba7e2034e2ab36972e1a5e9bab7f5e75d5720fd96ffffd30eb7131a6f7"}]}, @NL802154_ATTR_SEC_KEY={0x80, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1f5b487b21e6f9419c69efeda5e603b6459a77f91742a6a5f39d66cd72ea67c8"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "04aa9d4c3e523b6d0cb92e52c744ce9ad499407c6fbffb8e3c1cf9b7ec23d47e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4a374d3302cff5b27855aba81861d74649be310b9be5cd3707f9dd76869e938f"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r6 = socket(0x18, 0x0, 0x41) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x9, 0x1, 0x828, 0x800}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x400, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x880}, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:49 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 23:06:49 executing program 3: socketpair(0x5, 0x2, 0x4, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x308, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x800) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x308, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x800) socketpair(0x10, 0xa, 0x80000001, &(0x7f0000000000)) 23:06:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20002061}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24080094}, 0x8c1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e00000045913f1329492c5a74fab16b43f89f320fc6d08c88e1e0f5c6feb26437129f7f23615173418207566d83d7e81d3fe80a1764e0e00119e570", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4004800) 23:06:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) socket$l2tp6(0xa, 0x2, 0x73) 23:06:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x80) (async, rerun: 64) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r2) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001040)={0x14, 0x0, 0xc01}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)={0x4d8, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xfc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1726fec3ccb5e88a6d778aecb2703ec4"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0xa8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xffffffffffff0083}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_SEC_KEY={0xfc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "336829bb1c6d970fe25681f8107354fafc66c0b320facf100cb6855993c7dadb"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "db1a5f0218389d92c7ccd23771b998e2e7eeeaaed162ae1366eb84dcb501747c"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "60edea50e8ba0bf24528922bd915434e38cf42d75e5c033ec305ce43ab61e45b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e3ab443ec9911ff1fb6d8d91ffa92a4f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cc3439025078f2539049818681b8efae9ba7c2d2a36d0b82467aca77cf7c5000"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3876456e434f9c9d2933025e4a8e277e"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x204, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_ID={0xe4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1001f}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x64, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6d}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}]}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8627c2ba7e2034e2ab36972e1a5e9bab7f5e75d5720fd96ffffd30eb7131a6f7"}]}, @NL802154_ATTR_SEC_KEY={0x80, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1f5b487b21e6f9419c69efeda5e603b6459a77f91742a6a5f39d66cd72ea67c8"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "04aa9d4c3e523b6d0cb92e52c744ce9ad499407c6fbffb8e3c1cf9b7ec23d47e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4a374d3302cff5b27855aba81861d74649be310b9be5cd3707f9dd76869e938f"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) r6 = socket(0x18, 0x0, 0x41) (async, rerun: 64) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x9, 0x1, 0x828, 0x800}) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r7) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, 0x0, 0x80) (async) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x400, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x880}, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20002061}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24080094}, 0x8c1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e00000045913f1329492c5a74fab16b43f89f320fc6d08c88e1e0f5c6feb26437129f7f23615173418207566d83d7e81d3fe80a1764e0e00119e570", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4004800) 23:06:50 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) socket$l2tp6(0xa, 0x2, 0x73) 23:06:50 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 23:06:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) socket$l2tp6(0xa, 0x2, 0x73) 23:06:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x1c}}, 0x0) 23:06:50 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:50 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x80) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r2) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001040)={0x14, 0x0, 0xc01}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)={0x4d8, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xfc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1726fec3ccb5e88a6d778aecb2703ec4"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0xa8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xffffffffffff0083}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_SEC_KEY={0xfc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "336829bb1c6d970fe25681f8107354fafc66c0b320facf100cb6855993c7dadb"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "db1a5f0218389d92c7ccd23771b998e2e7eeeaaed162ae1366eb84dcb501747c"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "60edea50e8ba0bf24528922bd915434e38cf42d75e5c033ec305ce43ab61e45b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e3ab443ec9911ff1fb6d8d91ffa92a4f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cc3439025078f2539049818681b8efae9ba7c2d2a36d0b82467aca77cf7c5000"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3876456e434f9c9d2933025e4a8e277e"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x204, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_ID={0xe4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1001f}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x64, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6d}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}]}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8627c2ba7e2034e2ab36972e1a5e9bab7f5e75d5720fd96ffffd30eb7131a6f7"}]}, @NL802154_ATTR_SEC_KEY={0x80, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1f5b487b21e6f9419c69efeda5e603b6459a77f91742a6a5f39d66cd72ea67c8"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "04aa9d4c3e523b6d0cb92e52c744ce9ad499407c6fbffb8e3c1cf9b7ec23d47e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4a374d3302cff5b27855aba81861d74649be310b9be5cd3707f9dd76869e938f"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r6 = socket(0x18, 0x0, 0x41) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x9, 0x1, 0x828, 0x800}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r7) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, 0x0, 0x80) (async) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x400, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x880}, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x1c}}, 0x0) (async) 23:06:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 23:06:50 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x238d, 0x800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x700, 0x8000, 0x8, 0x7, {{0x19, 0x4, 0x1, 0x27, 0x64, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@ssrr={0x89, 0x17, 0xe2, [@multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @rr={0x7, 0x17, 0xce, [@multicast2, @broadcast, @multicast2, @empty, @empty]}, @noop, @ssrr={0x89, 0x1f, 0x32, [@dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @loopback, @private=0xa010101, @rand_addr=0x64010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x10, 0x0, 0x1ae, 0x8, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x67, 0x0, 0x29, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x7, "06d9724737"}, @timestamp={0x44, 0x20, 0x42, 0x0, 0x3, [0x1, 0xf7, 0xffffffff, 0x2, 0x4, 0x5, 0x78d]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x7, 0xb, "332e555a5e13ca129a"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x7800, 0x40, 0xfffffe01, 0xffffffff, {{0xb, 0x4, 0x3, 0x16, 0x2c, 0x68, 0x0, 0x7f, 0x29, 0x0, @local, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0xc2, 0x3, 0x0, [{@private=0xa010102, 0x9}]}, @cipso={0x86, 0xb, 0x0, [{0x1, 0x5, "fec93a"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x40, 0x80, 0xf638, 0xdfa, {{0xe, 0x4, 0x3, 0x6, 0x38, 0x65, 0x1, 0x8, 0x4, 0x0, @private=0xa010102, @empty, {[@lsrr={0x83, 0x23, 0x35, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010101, @private=0xa010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)={0x908, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x81, 0x21, 0xd}, {0x1, 0xa3, 0x9, 0x401}, {0xfeff, 0x9, 0x80, 0x2}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0x10c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0xb8, 0x4, 0x4}, {0x5, 0x4, 0xff, 0x6}, {0x8000, 0x7f, 0x3, 0x3f}, {0x1, 0x1f, 0xfb}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0xc, 0x82, 0x100}, {0xfff, 0x4, 0xe1, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0xfffffffffffffc83}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3fec}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x908}, 0x1, 0x0, 0x0, 0x4001}, 0x20000018) socketpair(0xa, 0x6, 0x0, 0x0) 23:06:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x1c}}, 0x0) 23:06:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 23:06:51 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x238d, 0x800) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x700, 0x8000, 0x8, 0x7, {{0x19, 0x4, 0x1, 0x27, 0x64, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@ssrr={0x89, 0x17, 0xe2, [@multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @rr={0x7, 0x17, 0xce, [@multicast2, @broadcast, @multicast2, @empty, @empty]}, @noop, @ssrr={0x89, 0x1f, 0x32, [@dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @loopback, @private=0xa010101, @rand_addr=0x64010100]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x10, 0x0, 0x1ae, 0x8, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x67, 0x0, 0x29, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x7, "06d9724737"}, @timestamp={0x44, 0x20, 0x42, 0x0, 0x3, [0x1, 0xf7, 0xffffffff, 0x2, 0x4, 0x5, 0x78d]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x7, 0xb, "332e555a5e13ca129a"}]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x7800, 0x40, 0xfffffe01, 0xffffffff, {{0xb, 0x4, 0x3, 0x16, 0x2c, 0x68, 0x0, 0x7f, 0x29, 0x0, @local, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0xc2, 0x3, 0x0, [{@private=0xa010102, 0x9}]}, @cipso={0x86, 0xb, 0x0, [{0x1, 0x5, "fec93a"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x40, 0x80, 0xf638, 0xdfa, {{0xe, 0x4, 0x3, 0x6, 0x38, 0x65, 0x1, 0x8, 0x4, 0x0, @private=0xa010102, @empty, {[@lsrr={0x83, 0x23, 0x35, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010101, @private=0xa010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)={0x908, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x81, 0x21, 0xd}, {0x1, 0xa3, 0x9, 0x401}, {0xfeff, 0x9, 0x80, 0x2}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0x10c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0xb8, 0x4, 0x4}, {0x5, 0x4, 0xff, 0x6}, {0x8000, 0x7f, 0x3, 0x3f}, {0x1, 0x1f, 0xfb}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0xc, 0x82, 0x100}, {0xfff, 0x4, 0xe1, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0xfffffffffffffc83}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3fec}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x908}, 0x1, 0x0, 0x0, 0x4001}, 0x20000018) (async) socketpair(0xa, 0x6, 0x0, 0x0) 23:06:51 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x4}}, 0x48) 23:06:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="9ca986dc010000000000000000000b6ee7a48526112bc1fbbb050000000500210000000000"], 0x1c}}, 0x0) 23:06:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x28000) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x78, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x200}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x44000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000bb51e96094d4939d4f3edab49c887500000000"], 0x1c}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) 23:06:51 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x48) 23:06:51 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 23:06:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="9ca986dc010000000000000000000b6ee7a48526112bc1fbbb050000000500210000000000"], 0x1c}}, 0x0) 23:06:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x28000) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x78, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x200}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x44000) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x78, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x200}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x44000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000bb51e96094d4939d4f3edab49c887500000000"], 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000bb51e96094d4939d4f3edab49c887500000000"], 0x1c}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) 23:06:51 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x238d, 0x800) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x700, 0x8000, 0x8, 0x7, {{0x19, 0x4, 0x1, 0x27, 0x64, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@ssrr={0x89, 0x17, 0xe2, [@multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @rr={0x7, 0x17, 0xce, [@multicast2, @broadcast, @multicast2, @empty, @empty]}, @noop, @ssrr={0x89, 0x1f, 0x32, [@dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @loopback, @private=0xa010101, @rand_addr=0x64010100]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x10, 0x0, 0x1ae, 0x8, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x67, 0x0, 0x29, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x7, "06d9724737"}, @timestamp={0x44, 0x20, 0x42, 0x0, 0x3, [0x1, 0xf7, 0xffffffff, 0x2, 0x4, 0x5, 0x78d]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x7, 0xb, "332e555a5e13ca129a"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x7800, 0x40, 0xfffffe01, 0xffffffff, {{0xb, 0x4, 0x3, 0x16, 0x2c, 0x68, 0x0, 0x7f, 0x29, 0x0, @local, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0xc2, 0x3, 0x0, [{@private=0xa010102, 0x9}]}, @cipso={0x86, 0xb, 0x0, [{0x1, 0x5, "fec93a"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x40, 0x80, 0xf638, 0xdfa, {{0xe, 0x4, 0x3, 0x6, 0x38, 0x65, 0x1, 0x8, 0x4, 0x0, @private=0xa010102, @empty, {[@lsrr={0x83, 0x23, 0x35, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010101, @private=0xa010100]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)={0x908, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x81, 0x21, 0xd}, {0x1, 0xa3, 0x9, 0x401}, {0xfeff, 0x9, 0x80, 0x2}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0x10c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0xb8, 0x4, 0x4}, {0x5, 0x4, 0xff, 0x6}, {0x8000, 0x7f, 0x3, 0x3f}, {0x1, 0x1f, 0xfb}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0xc, 0x82, 0x100}, {0xfff, 0x4, 0xe1, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0xfffffffffffffc83}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3fec}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x908}, 0x1, 0x0, 0x0, 0x4001}, 0x20000018) (async) socketpair(0xa, 0x6, 0x0, 0x0) 23:06:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x80, 0x727, 0x7f, 0x1, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x68, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0x17, 0xec, [@remote, @rand_addr=0x64010102, @multicast2, @loopback, @local]}, @cipso={0x86, 0x11, 0x0, [{0x1, 0xb, "a2d9e85c3f89099d8e"}]}]}}}}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="9ca986dc010000000000000000000b6ee7a48526112bc1fbbb050000000500210000000000"], 0x1c}}, 0x0) 23:06:51 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 23:06:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x28000) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x78, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x200}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x44000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000bb51e96094d4939d4f3edab49c887500000000"], 0x1c}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) 23:06:51 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:06:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x80, 0x727, 0x7f, 0x1, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x68, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0x17, 0xec, [@remote, @rand_addr=0x64010102, @multicast2, @loopback, @local]}, @cipso={0x86, 0x11, 0x0, [{0x1, 0xb, "a2d9e85c3f89099d8e"}]}]}}}}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='\x00'], 0x1c}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 23:06:52 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:06:52 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 23:06:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0x20, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x24}}, 0x0) 23:06:52 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x48) 23:06:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x80, 0x727, 0x7f, 0x1, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x68, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0x17, 0xec, [@remote, @rand_addr=0x64010102, @multicast2, @loopback, @local]}, @cipso={0x86, 0x11, 0x0, [{0x1, 0xb, "a2d9e85c3f89099d8e"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x80, 0x727, 0x7f, 0x1, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x68, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0x17, 0xec, [@remote, @rand_addr=0x64010102, @multicast2, @loopback, @local]}, @cipso={0x86, 0x11, 0x0, [{0x1, 0xb, "a2d9e85c3f89099d8e"}]}]}}}}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='\x00'], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 23:06:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0x20, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0x20, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x24}}, 0x0) (async) 23:06:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='\x00'], 0x1c}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='\x00'], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) 23:06:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x12, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x4008894) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:52 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 23:06:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x3ff, 0x400881) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x308, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x2a0, 0x8, 0x0, 0x1, [{0x29c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000640)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x34, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}}, 0x0) 23:06:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8000000000000001, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRESDEC=r9, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a000001", @ANYRES16=r7, @ANYBLOB="110000000000000000000f0000000500210000000000"], 0x1c}}, 0x0) r10 = syz_open_dev$vcsa(&(0x7f0000000540), 0x8, 0x400000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = socket(0x13, 0x800, 0x7) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r12, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r13, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r14) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000090b3538e249b5913f2355f126b0aa5ec440a8d09637e855987f92e4aeade452e14bb12078fc889ac602dbe48341af584ecffc94d4f387dc068b87677cb3692b668bf00775747acc716508c", @ANYRES16=r13, @ANYBLOB="00082abd7000ffdbdf25020000000500050001000000060003000200000014002000ff01000000000000000000000000000108000a000300000005000d000100000008000c000400000008001700", @ANYRES32=r14, @ANYBLOB="0c000f000700000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x3394965850d80145}, 0x4881) sendmsg$BATADV_CMD_GET_VLAN(r11, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="01010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf251100000005003300023b1500000030000000000008003b000100038005002f000100000008003100000800000500370001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x20008080) 23:06:53 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:06:53 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 23:06:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0x20, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x24}}, 0x0) 23:06:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x12, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x12, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x4008894) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:53 executing program 4: socketpair(0xa, 0x1, 0x4, 0x0) 23:06:53 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8000000000000001, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRESDEC=r9, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRESDEC=r9, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a000001", @ANYRES16=r7, @ANYBLOB="110000000000000000000f0000000500210000000000"], 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a000001", @ANYRES16=r7, @ANYBLOB="110000000000000000000f0000000500210000000000"], 0x1c}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000540), 0x8, 0x400000) (async) r10 = syz_open_dev$vcsa(&(0x7f0000000540), 0x8, 0x400000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket(0x13, 0x800, 0x7) (async) r11 = socket(0x13, 0x800, 0x7) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r12, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r13, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r14) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r14) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000090b3538e249b5913f2355f126b0aa5ec440a8d09637e855987f92e4aeade452e14bb12078fc889ac602dbe48341af584ecffc94d4f387dc068b87677cb3692b668bf00775747acc716508c", @ANYRES16=r13, @ANYBLOB="00082abd7000ffdbdf25020000000500050001000000060003000200000014002000ff01000000000000000000000000000108000a000300000005000d000100000008000c000400000008001700", @ANYRES32=r14, @ANYBLOB="0c000f000700000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x3394965850d80145}, 0x4881) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000090b3538e249b5913f2355f126b0aa5ec440a8d09637e855987f92e4aeade452e14bb12078fc889ac602dbe48341af584ecffc94d4f387dc068b87677cb3692b668bf00775747acc716508c", @ANYRES16=r13, @ANYBLOB="00082abd7000ffdbdf25020000000500050001000000060003000200000014002000ff01000000000000000000000000000108000a000300000005000d000100000008000c000400000008001700", @ANYRES32=r14, @ANYBLOB="0c000f000700000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x3394965850d80145}, 0x4881) sendmsg$BATADV_CMD_GET_VLAN(r11, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="01010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf251100000005003300023b1500000030000000000008003b000100038005002f000100000008003100000800000500370001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x20008080) 23:06:53 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x181802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x12, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x4008894) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8000000000000001, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="25279a9ea5463d97fb16953f755cb37630779b52e8bf935c6115ac0a3a7c5eab38c13857be236324a758a4dd10d3a53a56e31d507696a27810ad80a3a4e9ee3aa383c39ac6363063f6ac4fe00a126857e3469fd1472a2aa8bb33244b243023e4db809d908d4c21fcf71718636f1ea83fca7afb836649be8a7985039237a72e91d29350f7f56ad170e19e1916f82a5d1b39dd5e63e21c5f197300c836cf0f47389e14034fd0f3855cda263ec278496ade633ab6a9505860e93c38df2a3b360109fc17ebf291281aff42fc9022236b0ee5adae5ff04a2b3d89f04bb0cba77d0cab769803fdc9ee54d4a348bb938a73b306a7aa006d94e6147ed62c2231202d8a9e7aa2858cf9f606eee9e7809111e1b6de37d2fa46c40551e7d75a6dd3675591f6e589e095f85d14bc1921c56d9c3f45c14bbf1c1f75b4efca7dba9fdfdb37a813511c034aebe95cab0f308df5afacc91227790a927f72bcab64cf168a5f4583e9f050be658a8a868f59c932940a5f4fd526171429ade0b76356c8cab104859288bf3266638a67d81575251bbfae0b0ea702b21a88d71c4a67c51fe30a5b62df6ae1e198a8d8a5d7d2a2d845c3de834d1a7020e6510dd9ac16b2d56c9e18beba02f6a666ba72e325938ffddfff1392bf9620a626a69d08d6fa63c8c4245125ccae0ecde4987828869f5aa2ae1c5dd520da14ad7868e7e7d414", @ANYRES32=r8, @ANYRESDEC=r9, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a000001", @ANYRES16=r7, @ANYBLOB="110000000000000000000f0000000500210000000000"], 0x1c}}, 0x0) r10 = syz_open_dev$vcsa(&(0x7f0000000540), 0x8, 0x400000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r11 = socket(0x13, 0x800, 0x7) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r12, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r13, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r14) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000090b3538e249b5913f2355f126b0aa5ec440a8d09637e855987f92e4aeade452e14bb12078fc889ac602dbe48341af584ecffc94d4f387dc068b87677cb3692b668bf00775747acc716508c", @ANYRES16=r13, @ANYBLOB="00082abd7000ffdbdf25020000000500050001000000060003000200000014002000ff01000000000000000000000000000108000a000300000005000d000100000008000c000400000008001700", @ANYRES32=r14, @ANYBLOB="0c000f000700000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x3394965850d80145}, 0x4881) (async) sendmsg$BATADV_CMD_GET_VLAN(r11, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="01010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf251100000005003300023b1500000030000000000008003b000100038005002f000100000008003100000800000500370001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x20008080) 23:06:53 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 23:06:53 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:54 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:06:54 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x181802, 0x0) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x181802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:54 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 23:06:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0xfffffffd}, 0x14}}, 0x0) 23:06:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:54 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) 23:06:54 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x181802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:54 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 23:06:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0xfffffffd}, 0x14}}, 0x0) 23:06:54 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) dup(r1) r2 = dup(0xffffffffffffffff) recvfrom$l2tp(r2, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:54 executing program 1: r0 = dup(0xffffffffffffffff) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:55 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0xfffffffd}, 0x14}}, 0x0) 23:06:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r2) r4 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000100)=ANY=[@ANYBLOB="342772d9d637000061849fb7bf1d6f00", @ANYRES16=r3, @ANYBLOB="000000000000000000000300000014000200776730000000000000000000000000000900030073797a3100000000"], 0x34}}, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x203, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20018040}, 0x20000841) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:55 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 23:06:55 executing program 1: r0 = dup(0xffffffffffffffff) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:55 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x40) r1 = dup(r0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000240)=""/221, 0xdd, &(0x7f0000000340)=""/228, 0x3, 0x4}}, 0x48) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="765b00004b94ca766ea4b122b75416330d1000184cb3fe8ce26317edee4b94cd3b47603848e2e7fdaa5ac87d7b5853c9b51fc65ac45d6be552921165a886889e2f27881d27911a2aab851ff399", @ANYRESHEX=r3, @ANYBLOB="01000000c49f7b2e000005000000050052fe51b500002a29bbcd640d3813da145fc3257979142db8e484f0d9f3fdba0a633acce9f3343b528a19f8f303a061a28f3dd8da29ac1fa5151c2bd85652fb918f488e2caaaabb8412f546516d0c19d0654dc138f94ee23ba426fad34a046523c4f9b41e37cec3cc3154bfcceb9903395e708870cd668004a40a8a1486b2e49edf69fc0fe6aa7ec4932d9305916eb67b86508fd11d5b687c998af046a4ffc9067c85266a73573a11af62250e5710"], 0x1c}}, 0x0) 23:06:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}}, 0x0) 23:06:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r2) (async) r4 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, 0x0, 0x80) (async) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000100)=ANY=[@ANYBLOB="342772d9d637000061849fb7bf1d6f00", @ANYRES16=r3, @ANYBLOB="000000000000000000000300000014000200776730000000000000000000000000000900030073797a3100000000"], 0x34}}, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x203, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20018040}, 0x20000841) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (rerun: 64) 23:06:55 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, &(0x7f0000000100)=""/17, 0x11, 0xf73bce087869f8b4, &(0x7f0000000140), 0x10) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:55 executing program 4: write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='cubic\x00', 0x6) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0xfffffffd}) r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x80100) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20000001, 0x2000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x442001, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x2, 0x6, 0x6}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x120}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) 23:06:55 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 23:06:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}}, 0x0) 23:06:55 executing program 1: r0 = dup(0xffffffffffffffff) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:06:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r2) r4 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, 0x0, 0x80) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000100)=ANY=[@ANYBLOB="342772d9d637000061849fb7bf1d6f00", @ANYRES16=r3, @ANYBLOB="000000000000000000000300000014000200776730000000000000000000000000000900030073797a3100000000"], 0x34}}, 0x1) (async) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000100)=ANY=[@ANYBLOB="342772d9d637000061849fb7bf1d6f00", @ANYRES16=r3, @ANYBLOB="000000000000000000000300000014000200776730000000000000000000000000000900030073797a3100000000"], 0x34}}, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x203, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20018040}, 0x20000841) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}}, 0x0) 23:06:55 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (fail_nth: 1) 23:06:55 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10000, 0x8000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={0x0, 0x31}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x12, 0x72240) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xd, 0x0, 0x80}) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) 23:06:55 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) socketpair(0xa, 0x6, 0x0, 0x0) 23:06:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) [ 1286.646783] FAULT_INJECTION: forcing a failure. [ 1286.646783] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.658154] CPU: 1 PID: 32524 Comm: syz-executor.4 Not tainted 4.14.307-syzkaller #0 [ 1286.666037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1286.675392] Call Trace: [ 1286.677991] dump_stack+0x1b2/0x281 [ 1286.681625] should_fail.cold+0x10a/0x149 [ 1286.685797] should_failslab+0xd6/0x130 [ 1286.689802] kmem_cache_alloc_node+0x263/0x410 [ 1286.694391] __alloc_skb+0x5c/0x510 [ 1286.698016] sock_wmalloc+0xa5/0xf0 [ 1286.701642] l2tp_ip_sendmsg+0x14c/0x12a0 [ 1286.705788] inet_sendmsg+0x11a/0x4e0 [ 1286.709592] ? security_socket_sendmsg+0x83/0xb0 [ 1286.714351] ? inet_recvmsg+0x4d0/0x4d0 [ 1286.718326] sock_sendmsg+0xb5/0x100 [ 1286.722031] SyS_sendto+0x1c7/0x2c0 [ 1286.725670] ? SyS_getpeername+0x220/0x220 [ 1286.729928] ? lock_downgrade+0x740/0x740 [ 1286.734086] ? wait_for_completion_io+0x10/0x10 [ 1286.738744] ? vfs_write+0x319/0x4d0 [ 1286.742449] ? fput_many+0xe/0x140 [ 1286.745979] ? SyS_write+0x14d/0x210 [ 1286.749706] ? SyS_read+0x210/0x210 [ 1286.753327] ? __do_page_fault+0x159/0xad0 [ 1286.757563] ? do_syscall_64+0x4c/0x640 [ 1286.761531] ? SyS_getpeername+0x220/0x220 [ 1286.765757] do_syscall_64+0x1d5/0x640 [ 1286.769646] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1286.774826] RIP: 0033:0x7ff9c9cf40f9 [ 1286.778525] RSP: 002b:00007ff9c8224168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1286.786224] RAX: ffffffffffffffda RBX: 00007ff9c9e14120 RCX: 00007ff9c9cf40f9 [ 1286.793492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1286.800761] RBP: 00007ff9c82241d0 R08: 00000000200000c0 R09: 0000000000000010 [ 1286.808025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.815286] R13: 00007fff4599bd9f R14: 00007ff9c8224300 R15: 0000000000022000 23:06:56 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10000, 0x8000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={0x0, 0x31}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x12, 0x72240) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xd, 0x0, 0x80}) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) 23:06:56 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) socketpair(0xa, 0x6, 0x0, 0x0) (async) socketpair(0xa, 0x6, 0x0, 0x0) 23:06:56 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10000, 0x8000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={0x0, 0x31}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) (async) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x12, 0x72240) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xd, 0x0, 0x80}) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) 23:06:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) 23:06:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:56 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) socketpair(0xa, 0x6, 0x0, 0x0) 23:06:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) 23:06:56 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (fail_nth: 2) 23:06:56 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10000, 0x8000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={0x0, 0x31}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x12, 0x72240) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xd, 0x0, 0x80}) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) 23:06:56 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) socketpair(0xa, 0x6, 0x0, 0x0) 23:06:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:06:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x2}, 0x14}}, 0x0) 23:06:56 executing program 3: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3f}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) socketpair(0xa, 0x6, 0x0, 0x0) 23:06:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x2}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x2}, 0x14}}, 0x0) (async) 23:06:56 executing program 3: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3f}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) socketpair(0xa, 0x6, 0x0, 0x0) (async) socketpair(0xa, 0x6, 0x0, 0x0) 23:06:56 executing program 1: write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/64, 0x40, &(0x7f0000000140)=""/54, 0x3, 0x2}}, 0x48) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x2}) 23:06:56 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) socketpair(0xa, 0x6, 0x0, 0x0) 23:06:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket(0x1a, 0xa, 0x3) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x40449d0}, 0x4000000) 23:06:56 executing program 3: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3f}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) socketpair(0xa, 0x6, 0x0, 0x0) [ 1287.524913] FAULT_INJECTION: forcing a failure. [ 1287.524913] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.568433] CPU: 0 PID: 32584 Comm: syz-executor.4 Not tainted 4.14.307-syzkaller #0 [ 1287.576361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1287.585819] Call Trace: [ 1287.588429] dump_stack+0x1b2/0x281 [ 1287.592082] should_fail.cold+0x10a/0x149 [ 1287.596249] should_failslab+0xd6/0x130 [ 1287.600247] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1287.605387] __kmalloc_node_track_caller+0x38/0x70 [ 1287.610336] __alloc_skb+0x96/0x510 [ 1287.613984] sock_wmalloc+0xa5/0xf0 [ 1287.617631] l2tp_ip_sendmsg+0x14c/0x12a0 [ 1287.621805] inet_sendmsg+0x11a/0x4e0 [ 1287.625631] ? security_socket_sendmsg+0x83/0xb0 [ 1287.630403] ? inet_recvmsg+0x4d0/0x4d0 [ 1287.634399] sock_sendmsg+0xb5/0x100 [ 1287.638134] SyS_sendto+0x1c7/0x2c0 [ 1287.641789] ? SyS_getpeername+0x220/0x220 [ 1287.646053] ? lock_downgrade+0x740/0x740 [ 1287.650237] ? wait_for_completion_io+0x10/0x10 [ 1287.654930] ? vfs_write+0x319/0x4d0 [ 1287.658661] ? fput_many+0xe/0x140 [ 1287.662222] ? SyS_write+0x14d/0x210 [ 1287.665952] ? SyS_read+0x210/0x210 [ 1287.669592] ? __do_page_fault+0x159/0xad0 [ 1287.673867] ? do_syscall_64+0x4c/0x640 [ 1287.677863] ? SyS_getpeername+0x220/0x220 [ 1287.682121] do_syscall_64+0x1d5/0x640 [ 1287.686026] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1287.691223] RIP: 0033:0x7ff9c9cf40f9 [ 1287.694942] RSP: 002b:00007ff9c8224168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1287.702672] RAX: ffffffffffffffda RBX: 00007ff9c9e14120 RCX: 00007ff9c9cf40f9 [ 1287.709950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1287.717224] RBP: 00007ff9c82241d0 R08: 00000000200000c0 R09: 0000000000000010 [ 1287.724483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.731740] R13: 00007fff4599bd9f R14: 00007ff9c8224300 R15: 0000000000022000 23:06:57 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (fail_nth: 3) 23:06:57 executing program 1: write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/64, 0x40, &(0x7f0000000140)=""/54, 0x3, 0x2}}, 0x48) (async) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x2}) 23:06:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x2}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x2}, 0x14}}, 0x0) (async) 23:06:57 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (fail_nth: 1) 23:06:57 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket(0x1a, 0xa, 0x3) (async) r2 = socket(0x1a, 0xa, 0x3) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x40449d0}, 0x4000000) 23:06:57 executing program 3: socketpair(0x2b, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 23:06:57 executing program 1: write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/64, 0x40, &(0x7f0000000140)=""/54, 0x3, 0x2}}, 0x48) (async) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x2}) 23:06:57 executing program 3: socketpair(0x2b, 0x2, 0x0, 0x0) (async) r0 = dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 23:06:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x247, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) 23:06:57 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000440)={0x720, 0xf6, "82470a6ff07110ff2fc037e50ae992cb0b708bfd32fbee5a2eba160e921376a4c9201d2b77292dd9079de29104f69ff4958e81330e7de13f6a788eae4048abc8b75a7cc431957edf70e53237aae8d0aa22b517d8681d56babd9bf524add1217ae663c563cba64698a3e98eccd3bcf72ed674ae076cec6fab3946a309be3839426dc517b22c8aa09fdab71d6571edd8e8ce5e85c5b3af7710cc3c077308245e54c872470864daaec627ee74d29f3d20a22a4fec0d28a5eb3f80d374e4896b1b77ad129d31be5825ca7f0e20ac961648a2c64c57c543bac3a35f6bfec07a97846c1c5ad58dc14fd263226509c0bea02e039e3750067943"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd7000fbdbdf25050000000500130000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x20000000) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) syz_open_dev$rtc(&(0x7f0000000640), 0x4, 0x800) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x530, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc804}, 0xc004) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {r6}}, './file0\x00'}) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FIONCLEX(r10, 0x5450) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xf708e94d05a4fc13}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x400c010) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r11, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fffd000005000000050014000000000008001900ac20b1982b2453eecce06e81340daff27c8076531c34a6136b4a00e66b21dc2e5112c38050a910891373c69095c655a658522af340577aef5a91e7cf8540bfd679c06448b18bd6adb18db158619be726d8b38e5ade4c8adf6150f8bd5ac1bc324b98dcce1cdd1cbee6ea02342da583de7f4b05f060a129cae035aa7a8b8c838e1f40639c019c9ee3407f5a6073e932deda91caeff6352a5664547ae984fce6bc08b118ff3da4830167e3007c573be8a91b06eaae0b62a0ad27584de31b78fc98ad89ba018dd11f419f3fc7e0f0baa36b21c98f5d0e"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r12, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8040) 23:06:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) r2 = socket(0x1a, 0xa, 0x3) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x40449d0}, 0x4000000) 23:06:57 executing program 3: socketpair(0x2b, 0x2, 0x0, 0x0) (async) r0 = dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) [ 1288.435913] FAULT_INJECTION: forcing a failure. [ 1288.435913] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.488306] CPU: 0 PID: 32631 Comm: syz-executor.4 Not tainted 4.14.307-syzkaller #0 [ 1288.496236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1288.505613] Call Trace: [ 1288.508227] dump_stack+0x1b2/0x281 [ 1288.511885] should_fail.cold+0x10a/0x149 [ 1288.516060] ? trace_hardirqs_on+0x10/0x10 [ 1288.520323] should_failslab+0xd6/0x130 [ 1288.524334] kmem_cache_alloc+0x40/0x3c0 [ 1288.528421] dst_alloc+0xed/0x6d0 [ 1288.531903] rt_dst_alloc+0x6b/0x430 [ 1288.535647] ip_route_output_key_hash_rcu+0xab7/0x29f0 [ 1288.540954] ip_route_output_key_hash+0x195/0x2a0 [ 1288.545822] ? ip_route_output_key_hash_rcu+0x29f0/0x29f0 [ 1288.551382] ? lock_acquire+0x170/0x3f0 [ 1288.555385] ? check_preemption_disabled+0x35/0x240 [ 1288.560431] ip_route_output_flow+0x23/0x130 [ 1288.564862] l2tp_ip_sendmsg+0xb40/0x12a0 [ 1288.569044] inet_sendmsg+0x11a/0x4e0 [ 1288.572868] ? security_socket_sendmsg+0x83/0xb0 [ 1288.577641] ? inet_recvmsg+0x4d0/0x4d0 [ 1288.581632] sock_sendmsg+0xb5/0x100 [ 1288.585381] SyS_sendto+0x1c7/0x2c0 [ 1288.589000] ? SyS_getpeername+0x220/0x220 [ 1288.593234] ? lock_downgrade+0x740/0x740 [ 1288.597383] ? wait_for_completion_io+0x10/0x10 [ 1288.602045] ? vfs_write+0x319/0x4d0 [ 1288.605751] ? fput_many+0xe/0x140 [ 1288.609286] ? SyS_write+0x14d/0x210 [ 1288.612991] ? SyS_read+0x210/0x210 [ 1288.616612] ? __do_page_fault+0x159/0xad0 [ 1288.620926] ? do_syscall_64+0x4c/0x640 [ 1288.624892] ? SyS_getpeername+0x220/0x220 [ 1288.629132] do_syscall_64+0x1d5/0x640 [ 1288.633022] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1288.638200] RIP: 0033:0x7ff9c9cf40f9 [ 1288.641988] RSP: 002b:00007ff9c8224168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1288.649691] RAX: ffffffffffffffda RBX: 00007ff9c9e14120 RCX: 00007ff9c9cf40f9 [ 1288.656967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1288.664236] RBP: 00007ff9c82241d0 R08: 00000000200000c0 R09: 0000000000000010 [ 1288.671499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.678762] R13: 00007fff4599bd9f R14: 00007ff9c8224300 R15: 0000000000022000 23:06:58 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (fail_nth: 4) 23:06:58 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002010000009000000000000000ac1e0000000000000000000000000000ac1e00000000000000000000000000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0000000000000000000000000000ffffffff000000000000000000000000ac1e00"/160]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4a6600, 0x0) dup(r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000000c0)=0xfffffff8) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x5}, 0xa) 23:06:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x247, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) 23:06:58 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000440)={0x720, 0xf6, "82470a6ff07110ff2fc037e50ae992cb0b708bfd32fbee5a2eba160e921376a4c9201d2b77292dd9079de29104f69ff4958e81330e7de13f6a788eae4048abc8b75a7cc431957edf70e53237aae8d0aa22b517d8681d56babd9bf524add1217ae663c563cba64698a3e98eccd3bcf72ed674ae076cec6fab3946a309be3839426dc517b22c8aa09fdab71d6571edd8e8ce5e85c5b3af7710cc3c077308245e54c872470864daaec627ee74d29f3d20a22a4fec0d28a5eb3f80d374e4896b1b77ad129d31be5825ca7f0e20ac961648a2c64c57c543bac3a35f6bfec07a97846c1c5ad58dc14fd263226509c0bea02e039e3750067943"}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd7000fbdbdf25050000000500130000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x20000000) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) syz_open_dev$rtc(&(0x7f0000000640), 0x4, 0x800) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x530, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc804}, 0xc004) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {r6}}, './file0\x00'}) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FIONCLEX(r10, 0x5450) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xf708e94d05a4fc13}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x400c010) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r11, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fffd000005000000050014000000000008001900ac20b1982b2453eecce06e81340daff27c8076531c34a6136b4a00e66b21dc2e5112c38050a910891373c69095c655a658522af340577aef5a91e7cf8540bfd679c06448b18bd6adb18db158619be726d8b38e5ade4c8adf6150f8bd5ac1bc324b98dcce1cdd1cbee6ea02342da583de7f4b05f060a129cae035aa7a8b8c838e1f40639c019c9ee3407f5a6073e932deda91caeff6352a5664547ae984fce6bc08b118ff3da4830167e3007c573be8a91b06eaae0b62a0ad27584de31b78fc98ad89ba018dd11f419f3fc7e0f0baa36b21c98f5d0e"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r12, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8040) 23:06:58 executing program 3: socketpair(0x21, 0x3, 0x9, 0x0) 23:06:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='cdg\x00', 0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000051102c42014abef62a3d591d3e65df1a485ddc9602343279bc54ca92314916254f131ac13571fc65c27b2a55c82879586a7cb4d5e97ec242d55ca9dfc74beaed41366e35509a145d1c69cda59ff976f23e74666cc5cb8deb6a5436786757907b76e5fb3940e7d99a62285ab26c531e330f03cf889c1fc3e1be2a706cb07a27809a528decea778c61fff4ff5011ddfb04d597592b73e32b06464064b5721bc0eaf5c", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:06:58 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002010000009000000000000000ac1e0000000000000000000000000000ac1e00000000000000000000000000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0000000000000000000000000000ffffffff000000000000000000000000ac1e00"/160]}) (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4a6600, 0x0) dup(r0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000000c0)=0xfffffff8) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x5}, 0xa) 23:06:58 executing program 3: socketpair(0x21, 0x3, 0x9, 0x0) socketpair(0x21, 0x3, 0x9, 0x0) (async) 23:06:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='cdg\x00', 0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000051102c42014abef62a3d591d3e65df1a485ddc9602343279bc54ca92314916254f131ac13571fc65c27b2a55c82879586a7cb4d5e97ec242d55ca9dfc74beaed41366e35509a145d1c69cda59ff976f23e74666cc5cb8deb6a5436786757907b76e5fb3940e7d99a62285ab26c531e330f03cf889c1fc3e1be2a706cb07a27809a528decea778c61fff4ff5011ddfb04d597592b73e32b06464064b5721bc0eaf5c", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:06:58 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x247, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) 23:06:58 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000440)={0x720, 0xf6, "82470a6ff07110ff2fc037e50ae992cb0b708bfd32fbee5a2eba160e921376a4c9201d2b77292dd9079de29104f69ff4958e81330e7de13f6a788eae4048abc8b75a7cc431957edf70e53237aae8d0aa22b517d8681d56babd9bf524add1217ae663c563cba64698a3e98eccd3bcf72ed674ae076cec6fab3946a309be3839426dc517b22c8aa09fdab71d6571edd8e8ce5e85c5b3af7710cc3c077308245e54c872470864daaec627ee74d29f3d20a22a4fec0d28a5eb3f80d374e4896b1b77ad129d31be5825ca7f0e20ac961648a2c64c57c543bac3a35f6bfec07a97846c1c5ad58dc14fd263226509c0bea02e039e3750067943"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd7000fbdbdf25050000000500130000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x20000000) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) syz_open_dev$rtc(&(0x7f0000000640), 0x4, 0x800) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x530, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc804}, 0xc004) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {r6}}, './file0\x00'}) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FIONCLEX(r10, 0x5450) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xf708e94d05a4fc13}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x400c010) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r11, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fffd000005000000050014000000000008001900ac20b1982b2453eecce06e81340daff27c8076531c34a6136b4a00e66b21dc2e5112c38050a910891373c69095c655a658522af340577aef5a91e7cf8540bfd679c06448b18bd6adb18db158619be726d8b38e5ade4c8adf6150f8bd5ac1bc324b98dcce1cdd1cbee6ea02342da583de7f4b05f060a129cae035aa7a8b8c838e1f40639c019c9ee3407f5a6073e932deda91caeff6352a5664547ae984fce6bc08b118ff3da4830167e3007c573be8a91b06eaae0b62a0ad27584de31b78fc98ad89ba018dd11f419f3fc7e0f0baa36b21c98f5d0e"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r12, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8040) 23:06:58 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002010000009000000000000000ac1e0000000000000000000000000000ac1e00000000000000000000000000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0000000000000000000000000000ffffffff000000000000000000000000ac1e00"/160]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4a6600, 0x0) dup(r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000000c0)=0xfffffff8) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x5}, 0xa) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002010000009000000000000000ac1e0000000000000000000000000000ac1e00000000000000000000000000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0000000000000000000000000000ffffffff000000000000000000000000ac1e00"/160]}) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4a6600, 0x0) (async) dup(r0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000000c0)=0xfffffff8) (async) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x5}, 0xa) (async) 23:06:59 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25020000001400020064756d6d79300000000000400000000005000400020000000500040041000000050004000200000005000400010000001400020073797a6b616c6c657230000000000000b18145144945d9c7a5a1b5903c3dbac065ea6e2c8dfa2fe9b295e3bb9f839ae4a42fa8df37628bdf74c184673e4ffdfe8c88d02c600d4e4271e101"], 0x5c}}, 0x4000040) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:06:59 executing program 3: socketpair(0x21, 0x3, 0x9, 0x0) 23:06:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) 23:06:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='cdg\x00', 0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000051102c42014abef62a3d591d3e65df1a485ddc9602343279bc54ca92314916254f131ac13571fc65c27b2a55c82879586a7cb4d5e97ec242d55ca9dfc74beaed41366e35509a145d1c69cda59ff976f23e74666cc5cb8deb6a5436786757907b76e5fb3940e7d99a62285ab26c531e330f03cf889c1fc3e1be2a706cb07a27809a528decea778c61fff4ff5011ddfb04d597592b73e32b06464064b5721bc0eaf5c", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='cdg\x00', 0x4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000051102c42014abef62a3d591d3e65df1a485ddc9602343279bc54ca92314916254f131ac13571fc65c27b2a55c82879586a7cb4d5e97ec242d55ca9dfc74beaed41366e35509a145d1c69cda59ff976f23e74666cc5cb8deb6a5436786757907b76e5fb3940e7d99a62285ab26c531e330f03cf889c1fc3e1be2a706cb07a27809a528decea778c61fff4ff5011ddfb04d597592b73e32b06464064b5721bc0eaf5c", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) (async) 23:06:59 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x26, 0x0, 0x2}}, 0xfffffe92) 23:06:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0xee8, 0x9, 0x4, 0x8a0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x8b9248cb1427ee3a}, 0x20000100) 23:06:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) (rerun: 32) 23:06:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0xee8, 0x9, 0x4, 0x8a0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async, rerun: 64) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x8b9248cb1427ee3a}, 0x20000100) (rerun: 64) 23:06:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff5b, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 23:06:59 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x26, 0x0, 0x2}}, 0xfffffe92) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x26, 0x0, 0x2}}, 0xfffffe92) (async) 23:06:59 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket(0x29, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0xf851, 0x8, 0xffffcbb0, 0x2e48, {{0x10, 0x4, 0x2, 0x7, 0x40, 0x68, 0x0, 0xaa, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp={0x44, 0x2c, 0xa, 0x0, 0x5, [0x6, 0x80, 0x40, 0x3ff, 0xfff, 0x0, 0xffff, 0x5, 0xa74, 0xffffffff]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 23:06:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) (async) [ 1290.261684] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 23:07:00 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25020000001400020064756d6d79300000000000400000000005000400020000000500040041000000050004000200000005000400010000001400020073797a6b616c6c657230000000000000b18145144945d9c7a5a1b5903c3dbac065ea6e2c8dfa2fe9b295e3bb9f839ae4a42fa8df37628bdf74c184673e4ffdfe8c88d02c600d4e4271e101"], 0x5c}}, 0x4000040) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0xee8, 0x9, 0x4, 0x8a0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x8b9248cb1427ee3a}, 0x20000100) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0xee8, 0x9, 0x4, 0x8a0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x8b9248cb1427ee3a}, 0x20000100) (async) 23:07:00 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async, rerun: 32) r0 = socket(0x29, 0x2, 0x5) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0xf851, 0x8, 0xffffcbb0, 0x2e48, {{0x10, 0x4, 0x2, 0x7, 0x40, 0x68, 0x0, 0xaa, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp={0x44, 0x2c, 0xa, 0x0, 0x5, [0x6, 0x80, 0x40, 0x3ff, 0xfff, 0x0, 0xffff, 0x5, 0xa74, 0xffffffff]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 23:07:00 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x26, 0x0, 0x2}}, 0xfffffe92) 23:07:00 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff5b, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 23:07:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff5b, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 23:07:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x7, 0x40000000, 0x8, 0x800}) [ 1291.065496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 23:07:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:00 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket(0x29, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0xf851, 0x8, 0xffffcbb0, 0x2e48, {{0x10, 0x4, 0x2, 0x7, 0x40, 0x68, 0x0, 0xaa, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp={0x44, 0x2c, 0xa, 0x0, 0x5, [0x6, 0x80, 0x40, 0x3ff, 0xfff, 0x0, 0xffff, 0x5, 0xa74, 0xffffffff]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8800) socketpair(0xa, 0x6, 0x0, 0x0) (async) socket(0x29, 0x2, 0x5) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0xf851, 0x8, 0xffffcbb0, 0x2e48, {{0x10, 0x4, 0x2, 0x7, 0x40, 0x68, 0x0, 0xaa, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp={0x44, 0x2c, 0xa, 0x0, 0x5, [0x6, 0x80, 0x40, 0x3ff, 0xfff, 0x0, 0xffff, 0x5, 0xa74, 0xffffffff]}]}}}}}) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8800) (async) 23:07:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x7, 0x40000000, 0x8, 0x800}) (rerun: 64) [ 1291.205356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 23:07:01 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25020000001400020064756d6d79300000000000400000000005000400020000000500040041000000050004000200000005000400010000001400020073797a6b616c6c657230000000000000b18145144945d9c7a5a1b5903c3dbac065ea6e2c8dfa2fe9b295e3bb9f839ae4a42fa8df37628bdf74c184673e4ffdfe8c88d02c600d4e4271e101"], 0x5c}}, 0x4000040) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:01 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xff) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0xa0, &(0x7f0000000140), 0x8) 23:07:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:01 executing program 3: socketpair(0xa, 0x3, 0x0, 0x0) 23:07:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x20, 0x7800, 0x81, 0x40, {{0x19, 0x4, 0x1, 0x31, 0x64, 0x64, 0x0, 0x63, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@end, @generic={0x83, 0x4, "c938"}, @timestamp_prespec={0x44, 0x14, 0x92, 0x3, 0x6, [{@empty, 0x2}, {@rand_addr=0x64010102, 0x4a34}]}, @noop, @timestamp={0x44, 0x18, 0x43, 0x0, 0x1, [0x8, 0x10000, 0x6, 0x2, 0xffffffa4]}, @ssrr={0x89, 0xb, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0xda, 0x11, "af1e82ef318e082388b8d0c6441e29"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x40, 0x80, 0x10000, 0x6, {{0x2c, 0x4, 0x3, 0x0, 0xb0, 0x65, 0x0, 0x3, 0x29, 0x0, @remote, @loopback, {[@noop, @generic={0x82, 0xa, "9ddaa4b6249eccda"}, @lsrr={0x83, 0x13, 0xea, [@broadcast, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x1, 0xe, "639234cb92bdb35264087458"}]}, @ssrr={0x89, 0x1f, 0x4a, [@multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010102, @private=0xa010101, @local, @empty, @dev={0xac, 0x14, 0x14, 0x3a}]}, @rr={0x7, 0xf, 0x88, [@broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0x87, 0x1, 0x9, [{@loopback, 0xffff8000}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3ff}]}, @timestamp_addr={0x44, 0x1c, 0xaa, 0x1, 0x3, [{@multicast2, 0xb6d7}, {@multicast2, 0xfffffaa8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x400}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001100)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000000900)={0x7b4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x2, 0x3, 0x200}, {0x5, 0x3, 0xfb, 0x9}, {0x401, 0x5f, 0xd3, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x55}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r4}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x5, 0x0, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x91c}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x37}}}]}}]}, 0x7b4}}, 0x2044801) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x40, 0x0, 0x10001, 0x1f, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @broadcast, {[@noop, @rr={0x7, 0x1b, 0xb2, [@local, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @remote, @multicast1, @loopback]}]}}}}}) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0) write$vhost_msg_v2(r9, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0x58, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4840) r12 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x6, 0x141800) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r13, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r14, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r14, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfe}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48004}, 0x20004014) sendmsg$BATADV_CMD_TP_METER(r13, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='`Y\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf251100000008002c0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 23:07:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x7, 0x40000000, 0x8, 0x800}) 23:07:01 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xff) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0xa0, &(0x7f0000000140), 0x8) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xff) (async) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$FIONCLEX(r0, 0x5450) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0xa0, &(0x7f0000000140), 0x8) (async) 23:07:01 executing program 1: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000000c0)={0x2, 0x1, 0xc}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fd}) 23:07:01 executing program 3: socketpair(0xa, 0x3, 0x0, 0x0) 23:07:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:01 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xff) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0xa0, &(0x7f0000000140), 0x8) 23:07:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x20, 0x7800, 0x81, 0x40, {{0x19, 0x4, 0x1, 0x31, 0x64, 0x64, 0x0, 0x63, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@end, @generic={0x83, 0x4, "c938"}, @timestamp_prespec={0x44, 0x14, 0x92, 0x3, 0x6, [{@empty, 0x2}, {@rand_addr=0x64010102, 0x4a34}]}, @noop, @timestamp={0x44, 0x18, 0x43, 0x0, 0x1, [0x8, 0x10000, 0x6, 0x2, 0xffffffa4]}, @ssrr={0x89, 0xb, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0xda, 0x11, "af1e82ef318e082388b8d0c6441e29"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x40, 0x80, 0x10000, 0x6, {{0x2c, 0x4, 0x3, 0x0, 0xb0, 0x65, 0x0, 0x3, 0x29, 0x0, @remote, @loopback, {[@noop, @generic={0x82, 0xa, "9ddaa4b6249eccda"}, @lsrr={0x83, 0x13, 0xea, [@broadcast, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x1, 0xe, "639234cb92bdb35264087458"}]}, @ssrr={0x89, 0x1f, 0x4a, [@multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010102, @private=0xa010101, @local, @empty, @dev={0xac, 0x14, 0x14, 0x3a}]}, @rr={0x7, 0xf, 0x88, [@broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0x87, 0x1, 0x9, [{@loopback, 0xffff8000}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3ff}]}, @timestamp_addr={0x44, 0x1c, 0xaa, 0x1, 0x3, [{@multicast2, 0xb6d7}, {@multicast2, 0xfffffaa8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x400}]}, @end]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001100)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000000900)={0x7b4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x2, 0x3, 0x200}, {0x5, 0x3, 0xfb, 0x9}, {0x401, 0x5f, 0xd3, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x55}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r4}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x5, 0x0, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x91c}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x37}}}]}}]}, 0x7b4}}, 0x2044801) (async) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x40, 0x0, 0x10001, 0x1f, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @broadcast, {[@noop, @rr={0x7, 0x1b, 0xb2, [@local, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @remote, @multicast1, @loopback]}]}}}}}) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0) (async) write$vhost_msg_v2(r9, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0x58, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4840) r12 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x6, 0x141800) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r13, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r14, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r14, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfe}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48004}, 0x20004014) (async) sendmsg$BATADV_CMD_TP_METER(r13, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='`Y\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf251100000008002c0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 23:07:02 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x10000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) r7 = socket(0x9, 0x2, 0x7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d853886b6a4f015a805c16dd", @ANYRES16=r6, @ANYBLOB="000326bd7000ffdbdf250300000006001a004e2000000500210001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c090) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0xd10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) 23:07:02 executing program 1: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000000c0)={0x2, 0x1, 0xc}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fd}) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000000c0)={0x2, 0x1, 0xc}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fd}) (async) 23:07:02 executing program 3: socketpair(0xa, 0x3, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, 0x0) (async) 23:07:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0xc04, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffffffffffff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xbc}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x700, 0x8, 0xfffffffc, 0x919, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@end]}}}}}) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0x7, 0x400) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000300)={0x4, 0x20, 0x9, 0x5f, 0x6c, 0xff, 0xfc, 0x6, 0x8, 0x4, 0x2, "c5ddb194a127e1a4b3ce9861a2ca53e8ed025210738f69da8e8f31c11127e934"}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x2) 23:07:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x20, 0x7800, 0x81, 0x40, {{0x19, 0x4, 0x1, 0x31, 0x64, 0x64, 0x0, 0x63, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@end, @generic={0x83, 0x4, "c938"}, @timestamp_prespec={0x44, 0x14, 0x92, 0x3, 0x6, [{@empty, 0x2}, {@rand_addr=0x64010102, 0x4a34}]}, @noop, @timestamp={0x44, 0x18, 0x43, 0x0, 0x1, [0x8, 0x10000, 0x6, 0x2, 0xffffffa4]}, @ssrr={0x89, 0xb, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0xda, 0x11, "af1e82ef318e082388b8d0c6441e29"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x40, 0x80, 0x10000, 0x6, {{0x2c, 0x4, 0x3, 0x0, 0xb0, 0x65, 0x0, 0x3, 0x29, 0x0, @remote, @loopback, {[@noop, @generic={0x82, 0xa, "9ddaa4b6249eccda"}, @lsrr={0x83, 0x13, 0xea, [@broadcast, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x1, 0xe, "639234cb92bdb35264087458"}]}, @ssrr={0x89, 0x1f, 0x4a, [@multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010102, @private=0xa010101, @local, @empty, @dev={0xac, 0x14, 0x14, 0x3a}]}, @rr={0x7, 0xf, 0x88, [@broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0x87, 0x1, 0x9, [{@loopback, 0xffff8000}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3ff}]}, @timestamp_addr={0x44, 0x1c, 0xaa, 0x1, 0x3, [{@multicast2, 0xb6d7}, {@multicast2, 0xfffffaa8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x400}]}, @end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001100)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000000900)={0x7b4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x2, 0x3, 0x200}, {0x5, 0x3, 0xfb, 0x9}, {0x401, 0x5f, 0xd3, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x55}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r4}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x5, 0x0, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x91c}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x37}}}]}}]}, 0x7b4}}, 0x2044801) (async) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x40, 0x0, 0x10001, 0x1f, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @broadcast, {[@noop, @rr={0x7, 0x1b, 0xb2, [@local, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @remote, @multicast1, @loopback]}]}}}}}) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0) (async) write$vhost_msg_v2(r9, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0x58, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4840) (async) r12 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x6, 0x141800) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r13, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r14, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r14, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfe}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48004}, 0x20004014) (async) sendmsg$BATADV_CMD_TP_METER(r13, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='`Y\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf251100000008002c0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 23:07:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) (async, rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:02 executing program 1: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000000c0)={0x2, 0x1, 0xc}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fd}) 23:07:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0xc04, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffffffffffff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xbc}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x700, 0x8, 0xfffffffc, 0x919, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@end]}}}}}) (async) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0x7, 0x400) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000300)={0x4, 0x20, 0x9, 0x5f, 0x6c, 0xff, 0xfc, 0x6, 0x8, 0x4, 0x2, "c5ddb194a127e1a4b3ce9861a2ca53e8ed025210738f69da8e8f31c11127e934"}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x2) 23:07:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0xc04, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffffffffffff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xbc}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x700, 0x8, 0xfffffffc, 0x919, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@end]}}}}}) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0x7, 0x400) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000300)={0x4, 0x20, 0x9, 0x5f, 0x6c, 0xff, 0xfc, 0x6, 0x8, 0x4, 0x2, "c5ddb194a127e1a4b3ce9861a2ca53e8ed025210738f69da8e8f31c11127e934"}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x2) 23:07:02 executing program 3: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x9, 0x4, {{0x8, 0x4, 0x2, 0x8, 0x20, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x81, 0x1, 0xe, [{@multicast1, 0x7fff}]}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x0, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x2, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x0, 0x2b, 0x199a}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x0, 0x6, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x160400c0}, 0x4000) socketpair(0xa, 0x6, 0x0, 0x0) 23:07:02 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:07:02 executing program 1: iopl(0x9) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x703000) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x80000001) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x2, 0x1, 0x8}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) 23:07:03 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x10000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) r7 = socket(0x9, 0x2, 0x7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d853886b6a4f015a805c16dd", @ANYRES16=r6, @ANYBLOB="000326bd7000ffdbdf250300000006001a004e2000000500210001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c090) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0xd10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) socket$l2tp(0x2, 0x2, 0x73) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) dup(r1) (async) dup(r2) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x10000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) (async) socket(0x9, 0x2, 0x7) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d853886b6a4f015a805c16dd", @ANYRES16=r6, @ANYBLOB="000326bd7000ffdbdf250300000006001a004e2000000500210001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c090) (async) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0xd10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async) 23:07:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000380)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1028000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000f2dbdf25080000050600280003000000050030000000659d1b1c852dc010000005002e0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd28, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) 23:07:03 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 23:07:03 executing program 3: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x9, 0x4, {{0x8, 0x4, 0x2, 0x8, 0x20, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x81, 0x1, 0xe, [{@multicast1, 0x7fff}]}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x0, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x2, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x0, 0x2b, 0x199a}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x0, 0x6, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x160400c0}, 0x4000) (async) socketpair(0xa, 0x6, 0x0, 0x0) 23:07:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:07:03 executing program 1: iopl(0x9) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x703000) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x80000001) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x2, 0x1, 0x8}) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) 23:07:03 executing program 3: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x9, 0x4, {{0x8, 0x4, 0x2, 0x8, 0x20, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x81, 0x1, 0xe, [{@multicast1, 0x7fff}]}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x0, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x2, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x0, 0x2b, 0x199a}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x0, 0x6, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x160400c0}, 0x4000) (async) socketpair(0xa, 0x6, 0x0, 0x0) 23:07:03 executing program 1: iopl(0x9) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x703000) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x80000001) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x2, 0x1, 0x8}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) iopl(0x9) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x703000) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x80000001) (async) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x2, 0x1, 0x8}) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file0\x00'}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async) 23:07:03 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000380)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000380)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1028000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000f2dbdf25080000050600280003000000050030000000659d1b1c852dc010000005002e0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd28, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) 23:07:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:07:03 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 23:07:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x80, 0x2, 0x14, 0x2}, 0x6) 23:07:03 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x10000) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) (async) r7 = socket(0x9, 0x2, 0x7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d853886b6a4f015a805c16dd", @ANYRES16=r6, @ANYBLOB="000326bd7000ffdbdf250300000006001a004e2000000500210001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c090) (async) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0xd10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) 23:07:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004890) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000380)) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1028000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000f2dbdf25080000050600280003000000050030000000659d1b1c852dc010000005002e0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd28, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) 23:07:03 executing program 3: socketpair(0xa, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@empty, @rand_addr=0x64010102, 0x9, 0xc}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 23:07:03 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 23:07:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x80, 0x2, 0x14, 0x2}, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x80, 0x2, 0x14, 0x2}, 0x6) (async) 23:07:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x303000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) 23:07:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004890) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x80, 0x2, 0x14, 0x2}, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x80, 0x2, 0x14, 0x2}, 0x6) (async) 23:07:03 executing program 3: socketpair(0xa, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@empty, @rand_addr=0x64010102, 0x9, 0xc}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (rerun: 64) 23:07:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x303000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) 23:07:03 executing program 3: socketpair(0xa, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@empty, @rand_addr=0x64010102, 0x9, 0xc}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 23:07:04 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20c, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40010) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:04 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) r3 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x9, r2, 0x0, 0x0, 0xfffffffd}, 0x34}}, 0x1) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x305, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004890) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004890) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) 23:07:04 executing program 3: socketpair(0x28, 0x6, 0x6d38ffd2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x202080, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40004811) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x27d0, 0x300) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x30}}, 0x4040) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x4) 23:07:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x303000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) 23:07:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1a, 0x3, 0x3) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40014}, 0x20000804) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x1a, 0x3, 0x3) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40014}, 0x20000804) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x84) 23:07:04 executing program 3: socketpair(0x28, 0x6, 0x6d38ffd2, 0x0) (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x202080, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40004811) (async, rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x27d0, 0x300) (rerun: 64) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x30}}, 0x4040) (async) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x4) 23:07:04 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) (async) r3 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, 0x0, 0x80) (async) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x9, r2, 0x0, 0x0, 0xfffffffd}, 0x34}}, 0x1) (async, rerun: 32) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x305, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000) (async, rerun: 32) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) socketpair(0xf, 0x1, 0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200006000000fedbdf25010000001400020076657468305f766972745f7769466900090003007379050004040200000005000400020000000900030073797a3100000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x821a0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) 23:07:04 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x84) 23:07:05 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20c, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40010) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20c, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40010) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) dup(r1) (async) dup(r2) (async) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) 23:07:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1a, 0x3, 0x3) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40014}, 0x20000804) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async, rerun: 32) socketpair(0xf, 0x1, 0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200006000000fedbdf25010000001400020076657468305f766972745f7769466900090003007379050004040200000005000400020000000900030073797a3100000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) (async) syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x821a0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async, rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) (rerun: 32) 23:07:05 executing program 3: socketpair(0x28, 0x6, 0x6d38ffd2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x202080, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40004811) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x27d0, 0x300) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x30}}, 0x4040) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x4) socketpair(0x28, 0x6, 0x6d38ffd2, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x202080, 0x0) (async) dup(r0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40004811) (async) syz_open_dev$vcsa(&(0x7f0000000080), 0x27d0, 0x300) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x30}}, 0x4040) (async) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x4) (async) 23:07:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x84) 23:07:05 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) r3 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, 0x0, 0x80) (async) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x9, r2, 0x0, 0x0, 0xfffffffd}, 0x34}}, 0x1) (async) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x305, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="56159d7fc554"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x4040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x44, 0x0, 0x316, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xac0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140100006a4ab92f1b5722cd557dd2117e80d0421e03eb6ba2cf13aa65a7e25f4db74d85df84c312c450298eba11e56fcf1c7720753d0aa1ab2f26350818c01dacb634ed2e0b22fa1d8177872bef6ed1fcb7e13545874bd27092192ca454e0ea8bcd7186b39f05360b56ca21050fb34f24fba45ee0afa3355dcea2a80205ca9b5da7fb1160fe9874ead88f269e73f70965f1e471c08e4e5936763056c89ca78874cfbd67492cab356e7782c87f70b76e5f32f0643980da452937b37c206af4f526f01263b629dd6856fb54a3915475e38cd46de8a50a0abe88eb15ca02abd91fd362e0cd44b58feb36c1dc", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) 23:07:05 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x485, 0x0) sendto$l2tp(r0, &(0x7f0000000180)="8ea565b2b522adcbe889ba6454be804d71661753816ad233510dc2d655ac9c97d1e0ae010c0e36d683c5437edba0c63bd1b7603a3bb855d77b4fba05f54a654fac3e1bcd23ee456380fcf1c1083f9916d2deb208cf8de5590af15998ab28202640a234e7f33ceefc49d904de06d2b94f8a91f91654d1eba30485f806c58e25b4994291c45ca3ec6c5d5846046b934ce002e6d5252690b41cc04bdeccf8279b3ad23aaf8ad582e607298d7e60a031f8004943bf3b6f8fd845d35bdcfa86127f2724c519df5793afe0802aea6656423a35095f2ea9e2078c742daf9efc55b4c90a0b783535cb5d8855", 0xe8, 0x8000, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x3}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:05 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) socketpair(0x29, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000001) 23:07:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) socketpair(0xf, 0x1, 0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200006000000fedbdf25010000001400020076657468305f766972745f7769466900090003007379050004040200000005000400020000000900030073797a3100000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) (async) syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x821a0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) 23:07:05 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="56159d7fc554"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x4040000) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="56159d7fc554"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x4040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x44, 0x0, 0x316, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xac0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140100006a4ab92f1b5722cd557dd2117e80d0421e03eb6ba2cf13aa65a7e25f4db74d85df84c312c450298eba11e56fcf1c7720753d0aa1ab2f26350818c01dacb634ed2e0b22fa1d8177872bef6ed1fcb7e13545874bd27092192ca454e0ea8bcd7186b39f05360b56ca21050fb34f24fba45ee0afa3355dcea2a80205ca9b5da7fb1160fe9874ead88f269e73f70965f1e471c08e4e5936763056c89ca78874cfbd67492cab356e7782c87f70b76e5f32f0643980da452937b37c206af4f526f01263b629dd6856fb54a3915475e38cd46de8a50a0abe88eb15ca02abd91fd362e0cd44b58feb36c1dc", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) 23:07:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="009bae23d22a13733fc980af017c38e95100", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210001000000"], 0x1c}}, 0x0) 23:07:05 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20c, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40010) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:05 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x485, 0x0) sendto$l2tp(r0, &(0x7f0000000180)="8ea565b2b522adcbe889ba6454be804d71661753816ad233510dc2d655ac9c97d1e0ae010c0e36d683c5437edba0c63bd1b7603a3bb855d77b4fba05f54a654fac3e1bcd23ee456380fcf1c1083f9916d2deb208cf8de5590af15998ab28202640a234e7f33ceefc49d904de06d2b94f8a91f91654d1eba30485f806c58e25b4994291c45ca3ec6c5d5846046b934ce002e6d5252690b41cc04bdeccf8279b3ad23aaf8ad582e607298d7e60a031f8004943bf3b6f8fd845d35bdcfa86127f2724c519df5793afe0802aea6656423a35095f2ea9e2078c742daf9efc55b4c90a0b783535cb5d8855", 0xe8, 0x8000, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x3}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) syz_open_dev$vcsa(&(0x7f0000000000), 0x485, 0x0) (async) sendto$l2tp(r0, &(0x7f0000000180)="8ea565b2b522adcbe889ba6454be804d71661753816ad233510dc2d655ac9c97d1e0ae010c0e36d683c5437edba0c63bd1b7603a3bb855d77b4fba05f54a654fac3e1bcd23ee456380fcf1c1083f9916d2deb208cf8de5590af15998ab28202640a234e7f33ceefc49d904de06d2b94f8a91f91654d1eba30485f806c58e25b4994291c45ca3ec6c5d5846046b934ce002e6d5252690b41cc04bdeccf8279b3ad23aaf8ad582e607298d7e60a031f8004943bf3b6f8fd845d35bdcfa86127f2724c519df5793afe0802aea6656423a35095f2ea9e2078c742daf9efc55b4c90a0b783535cb5d8855", 0xe8, 0x8000, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x3}, 0x10) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$vhost_msg_v2(r1, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) 23:07:05 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) socketpair(0x29, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000001) 23:07:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="56159d7fc554"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x4040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x44, 0x0, 0x316, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xac0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140100006a4ab92f1b5722cd557dd2117e80d0421e03eb6ba2cf13aa65a7e25f4db74d85df84c312c450298eba11e56fcf1c7720753d0aa1ab2f26350818c01dacb634ed2e0b22fa1d8177872bef6ed1fcb7e13545874bd27092192ca454e0ea8bcd7186b39f05360b56ca21050fb34f24fba45ee0afa3355dcea2a80205ca9b5da7fb1160fe9874ead88f269e73f70965f1e471c08e4e5936763056c89ca78874cfbd67492cab356e7782c87f70b76e5f32f0643980da452937b37c206af4f526f01263b629dd6856fb54a3915475e38cd46de8a50a0abe88eb15ca02abd91fd362e0cd44b58feb36c1dc", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="56159d7fc554"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x4040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x44, 0x0, 0x316, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xac0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140100006a4ab92f1b5722cd557dd2117e80d0421e03eb6ba2cf13aa65a7e25f4db74d85df84c312c450298eba11e56fcf1c7720753d0aa1ab2f26350818c01dacb634ed2e0b22fa1d8177872bef6ed1fcb7e13545874bd27092192ca454e0ea8bcd7186b39f05360b56ca21050fb34f24fba45ee0afa3355dcea2a80205ca9b5da7fb1160fe9874ead88f269e73f70965f1e471c08e4e5936763056c89ca78874cfbd67492cab356e7782c87f70b76e5f32f0643980da452937b37c206af4f526f01263b629dd6856fb54a3915475e38cd46de8a50a0abe88eb15ca02abd91fd362e0cd44b58feb36c1dc", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) (async) 23:07:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="009bae23d22a13733fc980af017c38e95100", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210001000000"], 0x1c}}, 0x0) 23:07:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x4}) socket$isdn(0x22, 0x3, 0x72) 23:07:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="009bae23d22a13733fc980af017c38e95100", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210001000000"], 0x1c}}, 0x0) 23:07:05 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x485, 0x0) sendto$l2tp(r0, &(0x7f0000000180)="8ea565b2b522adcbe889ba6454be804d71661753816ad233510dc2d655ac9c97d1e0ae010c0e36d683c5437edba0c63bd1b7603a3bb855d77b4fba05f54a654fac3e1bcd23ee456380fcf1c1083f9916d2deb208cf8de5590af15998ab28202640a234e7f33ceefc49d904de06d2b94f8a91f91654d1eba30485f806c58e25b4994291c45ca3ec6c5d5846046b934ce002e6d5252690b41cc04bdeccf8279b3ad23aaf8ad582e607298d7e60a031f8004943bf3b6f8fd845d35bdcfa86127f2724c519df5793afe0802aea6656423a35095f2ea9e2078c742daf9efc55b4c90a0b783535cb5d8855", 0xe8, 0x8000, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x3}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) write$vhost_msg_v2(r1, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async, rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x4}) (rerun: 32) socket$isdn(0x22, 0x3, 0x72) 23:07:05 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) socketpair(0x29, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000001) socketpair(0xa, 0x6, 0x0, 0x0) (async) socketpair(0x29, 0xa, 0x8, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000001) (async) 23:07:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='\x00\x00'], 0x1c}}, 0x0) 23:07:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x1, 0x3f, {{0x6, 0x4, 0x0, 0x11, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100, {[@noop]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) 23:07:06 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x2, 0x2, 0x8}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x401}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) getsockname$l2tp(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000340)={0xc000000f}) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) r5 = dup(r4) r6 = socket(0x2c, 0xa, 0x0) getsockname$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) r7 = dup(r5) recvfrom$l2tp(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) r8 = syz_open_dev$media(&(0x7f0000000100), 0x2, 0x4000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r8, &(0x7f0000000380)={0x9}) 23:07:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x4}) (async) socket$isdn(0x22, 0x3, 0x72) 23:07:06 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$FIONCLEX(r0, 0x5450) 23:07:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='\x00\x00'], 0x1c}}, 0x0) 23:07:06 executing program 3: socketpair(0x21, 0x4, 0x20000006, 0x0) 23:07:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x1, 0x3f, {{0x6, 0x4, 0x0, 0x11, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100, {[@noop]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) dup(r0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x1, 0x3f, {{0x6, 0x4, 0x0, 0x11, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100, {[@noop]}}}}}) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) (async) 23:07:06 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$FIONCLEX(r0, 0x5450) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$FIONCLEX(r0, 0x5450) (async) 23:07:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='\x00\x00'], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='\x00\x00'], 0x1c}}, 0x0) (async) 23:07:06 executing program 3: socketpair(0x21, 0x4, 0x20000006, 0x0) 23:07:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xf7e51b58ec661ff}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000100)=0x8) 23:07:06 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$FIONCLEX(r0, 0x5450) 23:07:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) r2 = dup(r0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x1, 0x3f, {{0x6, 0x4, 0x0, 0x11, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100, {[@noop]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) 23:07:07 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x2, 0x2, 0x8}) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x401}, 0x4000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) getsockname$l2tp(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000340)={0xc000000f}) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) r5 = dup(r4) (async, rerun: 64) r6 = socket(0x2c, 0xa, 0x0) (rerun: 64) getsockname$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) (async) r7 = dup(r5) recvfrom$l2tp(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) r8 = syz_open_dev$media(&(0x7f0000000100), 0x2, 0x4000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r8, &(0x7f0000000380)={0x9}) 23:07:07 executing program 3: socketpair(0x21, 0x4, 0x20000006, 0x0) 23:07:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xf7e51b58ec661ff}) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000100)=0x8) 23:07:07 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0e0000", @ANYRES16=r3, @ANYBLOB="08002abd7000ffdbdf250600000005002e00000000000500300001000000080034000600000008000600", @ANYRES32=0x0, @ANYBLOB="0800320003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x800) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="f05e8df4", @ANYRES16=r3, @ANYBLOB="00042bbd7000fcdbdf2501000000050038000100000008003b007f000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x800) 23:07:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004c0}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44850}, 0x20000000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) recvfrom$l2tp(r2, &(0x7f0000000240)=""/4096, 0x1000, 0x40010000, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001380)={'tunl0\x00', &(0x7f00000012c0)={'gre0\x00', r3, 0x700, 0x80, 0x80000000, 0xa10e, {{0x25, 0x4, 0x3, 0x7, 0x94, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0xf, 0xe2, [@remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x44, 0x1, 0x1, [{@remote, 0x8001}]}, @noop, @cipso={0x86, 0x4d, 0xffffffffffffffff, [{0xd93c30b6cbd96f09, 0x9, "6dc783ed684b36"}, {0x0, 0xd, "982153bd58f1510585fb36"}, {0x6, 0xf, "a4a4032c1292647b98e5bba417"}, {0x6, 0x12, "97dc6f98518a913c678480ecc277a2ec"}, {0x1, 0x10, "df9964633e6615dd1df52de7e4ac"}]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0xf, 0xe0, [@dev={0xac, 0x14, 0x14, 0xa}, @loopback, @private=0xa010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000013c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001400)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000014c0)={0x1, 0x58, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'ip_vti0\x00', &(0x7f0000001540)={'syztnl1\x00', r5, 0x1, 0x80, 0x2, 0x4, {{0x12, 0x4, 0x2, 0x4, 0x48, 0x67, 0x0, 0x20, 0x29, 0x0, @loopback, @local, {[@ssrr={0x89, 0xf, 0x13, [@private=0xa010101, @empty, @local]}, @timestamp_addr={0x44, 0x24, 0xdb, 0x1, 0x2, [{@broadcast, 0x8f0a}, {@private=0xa010100, 0xffff}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa68b}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d40)={&(0x7f0000001600)={0x730, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x6, 0x3d, 0x9}, {0x99d, 0xd7, 0x2, 0x5}, {0x3ff, 0x20, 0x5, 0x9}, {0xfff9, 0x9, 0x1, 0x2}, {0x7ff, 0x4, 0x3f, 0xda48}, {0x7, 0x1, 0x9, 0x4}, {0xc000, 0x20, 0xff, 0xff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xce6}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x4, 0x4, 0x100}, {0xc8, 0x2, 0x4, 0x10000}, {0x40, 0xd6, 0x20, 0x9}]}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd7}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r5}, {0x4}}]}, 0x730}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004c0}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44850}, 0x20000000) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (rerun: 32) 23:07:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xf7e51b58ec661ff}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000100)=0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xf7e51b58ec661ff}) (async) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000100)=0x8) (async) 23:07:07 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r4) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0e0000", @ANYRES16=r3, @ANYBLOB="08002abd7000ffdbdf250600000005002e00000000000500300001000000080034000600000008000600", @ANYRES32=0x0, @ANYBLOB="0800320003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x800) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="f05e8df4", @ANYRES16=r3, @ANYBLOB="00042bbd7000fcdbdf2501000000050038000100000008003b007f000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x800) 23:07:07 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004e2013bee906ca554054ef72edc2ed1267d64d03502dcabf976233f2bcf1c94e060e67b2173d72a42e386585917b0a3a1f8b90d0595ed63f7ef2e2e9a444450a6c94054ba98e0ba7114a8278cb678a85757818fd544ee7799dd2de45406b4372dba24534527921fc74a53e349443c8ac5564795fed3f58df5a8c8391f9a95935c966c9", @ANYRES16=r0, @ANYBLOB="000226bd7000fbdbdf250300000008003a0005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x44810) socketpair(0xa, 0x6, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0xc, 0x1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00022dbd7000fcdbdf250100000048982d4f73e493d27b4c71c6184e64c7"], 0x14}, 0x1, 0x0, 0x0, 0x42840}, 0x880) 23:07:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004c0}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44850}, 0x20000000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:07 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r4) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0e0000", @ANYRES16=r3, @ANYBLOB="08002abd7000ffdbdf250600000005002e00000000000500300001000000080034000600000008000600", @ANYRES32=0x0, @ANYBLOB="0800320003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x800) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="f05e8df4", @ANYRES16=r3, @ANYBLOB="00042bbd7000fcdbdf2501000000050038000100000008003b007f000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x800) 23:07:08 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x2, 0x2, 0x8}) (async, rerun: 64) r1 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x401}, 0x4000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) getsockname$l2tp(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000340)={0xc000000f}) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = dup(r0) r5 = dup(r4) (async, rerun: 32) r6 = socket(0x2c, 0xa, 0x0) (rerun: 32) getsockname$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) (async, rerun: 32) r7 = dup(r5) (rerun: 32) recvfrom$l2tp(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) r8 = syz_open_dev$media(&(0x7f0000000100), 0x2, 0x4000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r8, &(0x7f0000000380)={0x9}) 23:07:08 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004e2013bee906ca554054ef72edc2ed1267d64d03502dcabf976233f2bcf1c94e060e67b2173d72a42e386585917b0a3a1f8b90d0595ed63f7ef2e2e9a444450a6c94054ba98e0ba7114a8278cb678a85757818fd544ee7799dd2de45406b4372dba24534527921fc74a53e349443c8ac5564795fed3f58df5a8c8391f9a95935c966c9", @ANYRES16=r0, @ANYBLOB="000226bd7000fbdbdf250300000008003a0005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x44810) socketpair(0xa, 0x6, 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0xc, 0x1) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00022dbd7000fcdbdf250100000048982d4f73e493d27b4c71c6184e64c7"], 0x14}, 0x1, 0x0, 0x0, 0x42840}, 0x880) 23:07:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)}, 0x10) 23:07:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:08 executing program 2: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x8054}, 0x400c080) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x24800) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x48) 23:07:08 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) recvfrom$l2tp(r2, &(0x7f0000000240)=""/4096, 0x1000, 0x40010000, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async) recvfrom$l2tp(r2, &(0x7f0000000240)=""/4096, 0x1000, 0x40010000, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001380)={'tunl0\x00', &(0x7f00000012c0)={'gre0\x00', r3, 0x700, 0x80, 0x80000000, 0xa10e, {{0x25, 0x4, 0x3, 0x7, 0x94, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0xf, 0xe2, [@remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x44, 0x1, 0x1, [{@remote, 0x8001}]}, @noop, @cipso={0x86, 0x4d, 0xffffffffffffffff, [{0xd93c30b6cbd96f09, 0x9, "6dc783ed684b36"}, {0x0, 0xd, "982153bd58f1510585fb36"}, {0x6, 0xf, "a4a4032c1292647b98e5bba417"}, {0x6, 0x12, "97dc6f98518a913c678480ecc277a2ec"}, {0x1, 0x10, "df9964633e6615dd1df52de7e4ac"}]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0xf, 0xe0, [@dev={0xac, 0x14, 0x14, 0xa}, @loopback, @private=0xa010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000013c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001400)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000014c0)={0x1, 0x58, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'ip_vti0\x00', &(0x7f0000001540)={'syztnl1\x00', r5, 0x1, 0x80, 0x2, 0x4, {{0x12, 0x4, 0x2, 0x4, 0x48, 0x67, 0x0, 0x20, 0x29, 0x0, @loopback, @local, {[@ssrr={0x89, 0xf, 0x13, [@private=0xa010101, @empty, @local]}, @timestamp_addr={0x44, 0x24, 0xdb, 0x1, 0x2, [{@broadcast, 0x8f0a}, {@private=0xa010100, 0xffff}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa68b}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d40)={&(0x7f0000001600)={0x730, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x6, 0x3d, 0x9}, {0x99d, 0xd7, 0x2, 0x5}, {0x3ff, 0x20, 0x5, 0x9}, {0xfff9, 0x9, 0x1, 0x2}, {0x7ff, 0x4, 0x3f, 0xda48}, {0x7, 0x1, 0x9, 0x4}, {0xc000, 0x20, 0xff, 0xff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xce6}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x4, 0x4, 0x100}, {0xc8, 0x2, 0x4, 0x10000}, {0x40, 0xd6, 0x20, 0x9}]}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd7}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r5}, {0x4}}]}, 0x730}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:08 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004e2013bee906ca554054ef72edc2ed1267d64d03502dcabf976233f2bcf1c94e060e67b2173d72a42e386585917b0a3a1f8b90d0595ed63f7ef2e2e9a444450a6c94054ba98e0ba7114a8278cb678a85757818fd544ee7799dd2de45406b4372dba24534527921fc74a53e349443c8ac5564795fed3f58df5a8c8391f9a95935c966c9", @ANYRES16=r0, @ANYBLOB="000226bd7000fbdbdf250300000008003a0005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x44810) socketpair(0xa, 0x6, 0x0, 0x0) (async) socketpair(0xa, 0x6, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0xc, 0x1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00022dbd7000fcdbdf250100000048982d4f73e493d27b4c71c6184e64c7"], 0x14}, 0x1, 0x0, 0x0, 0x42840}, 0x880) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00022dbd7000fcdbdf250100000048982d4f73e493d27b4c71c6184e64c7"], 0x14}, 0x1, 0x0, 0x0, 0x42840}, 0x880) 23:07:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="0100f20c7bb80000010000001800000080d1af782bc557b3537f790cad2cc6846c40bdc40900005caccdf906f136fd58349c97f74ec442076237b9fd1f85e86f9a03b13afb18a20e923cc7a815271b5a488ecf5fae996f946c209bcd23de0d946c784842986b35d82ae0b21948922805a4fd5d9776b2be315e80a12f5285ce7f2861df5f19c26048a6e1e4dc0df8fea3ff1630cfb8051cf94465eb827e924c19917e64e08d50aea57a9e5487c7de4e3cd92fe0ab862aec72a84b005cfb861c91a6f0428023e4311aed7cc9eec17d489bc9ea3f7af4a2d227d7a1fc0531570788c78258bf5c316f83a657426fb96d9e1128b41d71f99f4b42ffbb39d54f83efac8987d95d3bff6a6934fb0d0fd0af1d9efac3387dfab441efe4947b210a9f3e933ae80301cb30ac8bca58f2283486705a7c73e8d67254ca6515f4b2ebf0bd2a9840690a75b64938ac4d9d6b41ad1e1db32a857b86a7d5bdf8472f8d85dbc433a7b30d013301af3770cacd604ac27f107b979d43b6056ea88b3c6d6fa0c870d49cca911c5a1ef104cf1bc44cb0a21e534408dbf06e11f81f60757c08d6e8fbe80d193f9ddd1f8f1590ad27307de81176525fa9bf", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)}, 0x10) 23:07:08 executing program 2: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x8054}, 0x400c080) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x24800) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x48) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x8054}, 0x400c080) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x24800) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x48) (async) 23:07:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)}, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="0100f20c7bb80000010000001800000080d1af782bc557b3537f790cad2cc6846c40bdc40900005caccdf906f136fd58349c97f74ec442076237b9fd1f85e86f9a03b13afb18a20e923cc7a815271b5a488ecf5fae996f946c209bcd23de0d946c784842986b35d82ae0b21948922805a4fd5d9776b2be315e80a12f5285ce7f2861df5f19c26048a6e1e4dc0df8fea3ff1630cfb8051cf94465eb827e924c19917e64e08d50aea57a9e5487c7de4e3cd92fe0ab862aec72a84b005cfb861c91a6f0428023e4311aed7cc9eec17d489bc9ea3f7af4a2d227d7a1fc0531570788c78258bf5c316f83a657426fb96d9e1128b41d71f99f4b42ffbb39d54f83efac8987d95d3bff6a6934fb0d0fd0af1d9efac3387dfab441efe4947b210a9f3e933ae80301cb30ac8bca58f2283486705a7c73e8d67254ca6515f4b2ebf0bd2a9840690a75b64938ac4d9d6b41ad1e1db32a857b86a7d5bdf8472f8d85dbc433a7b30d013301af3770cacd604ac27f107b979d43b6056ea88b3c6d6fa0c870d49cca911c5a1ef104cf1bc44cb0a21e534408dbf06e11f81f60757c08d6e8fbe80d193f9ddd1f8f1590ad27307de81176525fa9bf", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)}, 0x10) (async) 23:07:09 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r4) write$vhost_msg(r4, &(0x7f0000000100)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8e4af5831dbacdeb, 0x3}}, 0x48) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:09 executing program 2: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x8054}, 0x400c080) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x8054}, 0x400c080) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x24800) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x48) 23:07:09 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x6, 0x80000001, {{0x10, 0x4, 0x2, 0x3a, 0x40, 0x68, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x45, 0x1, 0x2, [{@local, 0x8}]}, @noop, @rr={0x7, 0x3, 0xd6}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0x6, [{@private=0xa010101, 0x3}, {@empty, 0xfffffff7}]}]}}}}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x220, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x32b9}]}, 0x4c}}, 0x4884) socketpair(0xf, 0x800, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x41) 23:07:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x652501) 23:07:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) (async) recvfrom$l2tp(r2, &(0x7f0000000240)=""/4096, 0x1000, 0x40010000, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001380)={'tunl0\x00', &(0x7f00000012c0)={'gre0\x00', r3, 0x700, 0x80, 0x80000000, 0xa10e, {{0x25, 0x4, 0x3, 0x7, 0x94, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0xf, 0xe2, [@remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x44, 0x1, 0x1, [{@remote, 0x8001}]}, @noop, @cipso={0x86, 0x4d, 0xffffffffffffffff, [{0xd93c30b6cbd96f09, 0x9, "6dc783ed684b36"}, {0x0, 0xd, "982153bd58f1510585fb36"}, {0x6, 0xf, "a4a4032c1292647b98e5bba417"}, {0x6, 0x12, "97dc6f98518a913c678480ecc277a2ec"}, {0x1, 0x10, "df9964633e6615dd1df52de7e4ac"}]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0xf, 0xe0, [@dev={0xac, 0x14, 0x14, 0xa}, @loopback, @private=0xa010101]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000013c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001400)={'batadv_slave_0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000014c0)={0x1, 0x58, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001500)={'batadv_slave_0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'ip_vti0\x00', &(0x7f0000001540)={'syztnl1\x00', r5, 0x1, 0x80, 0x2, 0x4, {{0x12, 0x4, 0x2, 0x4, 0x48, 0x67, 0x0, 0x20, 0x29, 0x0, @loopback, @local, {[@ssrr={0x89, 0xf, 0x13, [@private=0xa010101, @empty, @local]}, @timestamp_addr={0x44, 0x24, 0xdb, 0x1, 0x2, [{@broadcast, 0x8f0a}, {@private=0xa010100, 0xffff}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa68b}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d40)={&(0x7f0000001600)={0x730, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x6, 0x3d, 0x9}, {0x99d, 0xd7, 0x2, 0x5}, {0x3ff, 0x20, 0x5, 0x9}, {0xfff9, 0x9, 0x1, 0x2}, {0x7ff, 0x4, 0x3f, 0xda48}, {0x7, 0x1, 0x9, 0x4}, {0xc000, 0x20, 0xff, 0xff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xce6}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x4, 0x4, 0x100}, {0xc8, 0x2, 0x4, 0x10000}, {0x40, 0xd6, 0x20, 0x9}]}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd7}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r5}, {0x4}}]}, 0x730}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:09 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x6, 0x80000001, {{0x10, 0x4, 0x2, 0x3a, 0x40, 0x68, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x45, 0x1, 0x2, [{@local, 0x8}]}, @noop, @rr={0x7, 0x3, 0xd6}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0x6, [{@private=0xa010101, 0x3}, {@empty, 0xfffffff7}]}]}}}}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x220, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x32b9}]}, 0x4c}}, 0x4884) (async) socketpair(0xf, 0x800, 0x5, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x41) 23:07:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x652501) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x652501) (async) 23:07:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f00000002c0), 0x100, 0x141000) ioctl$FIONCLEX(r1, 0x5450) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000000)={0x1, 0x3, 0x9}) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = dup(0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x29, 0x2, 0x7f) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {r7}}, './file0\x00'}) r8 = dup(r3) ioctl$DRM_IOCTL_SET_SAREA_CTX(r8, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000200)=""/31}) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="3c8d255fa54015915a8cb18a65e3d7f766a9c78e0d203a0d00dcaeaf1dc0e7ef9aa8283ccde5183c92e1d61ecd2a8e46cd6cd5e1b8dd433705cd354e2cb6c2ece6e7e83d1eb8a8c61700736446c3d4789d439a4550ad0ce2757be24fd9ce0442211d94e52bb9c587c340257e4113880d2cc00f3df8006f434985061d870755ca23c76c89eb4d69239d66f46bed017666aca33e8e0203bf39e222137ade2e6fafeee218a06eee481617554a", @ANYRES64=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) 23:07:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x652501) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x652501) (async) 23:07:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$media(&(0x7f00000002c0), 0x100, 0x141000) (async) r1 = syz_open_dev$media(&(0x7f00000002c0), 0x100, 0x141000) ioctl$FIONCLEX(r1, 0x5450) socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000000)={0x1, 0x3, 0x9}) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = dup(0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x29, 0x2, 0x7f) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {r7}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {r7}}, './file0\x00'}) dup(r3) (async) r8 = dup(r3) ioctl$DRM_IOCTL_SET_SAREA_CTX(r8, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000200)=""/31}) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="3c8d255fa54015915a8cb18a65e3d7f766a9c78e0d203a0d00dcaeaf1dc0e7ef9aa8283ccde5183c92e1d61ecd2a8e46cd6cd5e1b8dd433705cd354e2cb6c2ece6e7e83d1eb8a8c61700736446c3d4789d439a4550ad0ce2757be24fd9ce0442211d94e52bb9c587c340257e4113880d2cc00f3df8006f434985061d870755ca23c76c89eb4d69239d66f46bed017666aca33e8e0203bf39e222137ade2e6fafeee218a06eee481617554a", @ANYRES64=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) (async) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) 23:07:09 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = dup(r0) (rerun: 64) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r4) (async) write$vhost_msg(r4, &(0x7f0000000100)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8e4af5831dbacdeb, 0x3}}, 0x48) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:09 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x6, 0x80000001, {{0x10, 0x4, 0x2, 0x3a, 0x40, 0x68, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x45, 0x1, 0x2, [{@local, 0x8}]}, @noop, @rr={0x7, 0x3, 0xd6}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0x6, [{@private=0xa010101, 0x3}, {@empty, 0xfffffff7}]}]}}}}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x220, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x32b9}]}, 0x4c}}, 0x4884) socketpair(0xf, 0x800, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x41) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x6, 0x80000001, {{0x10, 0x4, 0x2, 0x3a, 0x40, 0x68, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x45, 0x1, 0x2, [{@local, 0x8}]}, @noop, @rr={0x7, 0x3, 0xd6}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0x6, [{@private=0xa010101, 0x3}, {@empty, 0xfffffff7}]}]}}}}}) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x220, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x99}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x32b9}]}, 0x4c}}, 0x4884) (async) socketpair(0xf, 0x800, 0x5, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x41) (async) 23:07:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r5) r7 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r6, 0x300, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r8 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, 0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x458, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xef}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r1, 0x40, 0x20, 0xfffffc8a, 0x80, {{0x45, 0x4, 0x0, 0x1a, 0x114, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @local, {[@rr={0x7, 0x1b, 0x59, [@dev={0xac, 0x14, 0x14, 0x34}, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0xd, [{@multicast1, 0x3f}]}, @timestamp_addr={0x44, 0x54, 0xb5, 0x1, 0x3, [{@private=0xa010100, 0xf9e}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x80000000}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x2}, {@private=0xa010101, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x9}, {@private=0xa010101, 0x36a}, {@multicast2, 0x9}]}, @cipso={0x86, 0x1b, 0x0, [{0x7, 0x9, "062048652e539a"}, {0x0, 0x4, "8223"}, {0x5, 0x8, "d433500bc840"}]}, @lsrr={0x83, 0x1b, 0xb8, [@empty, @multicast2, @loopback, @local, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xd3, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@multicast2, 0x401}, {@remote, 0x8000}, {@broadcast, 0xa6}]}, @ssrr={0x89, 0x1b, 0xe7, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @loopback, @multicast2, @private=0xa010100]}, @ssrr={0x89, 0xf, 0xc4, [@private=0xfffffffd, @multicast2, @local]}]}}}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:10 executing program 3: socketpair(0x2b, 0x6, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 23:07:10 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r1, 0x40, 0x20, 0xfffffc8a, 0x80, {{0x45, 0x4, 0x0, 0x1a, 0x114, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @local, {[@rr={0x7, 0x1b, 0x59, [@dev={0xac, 0x14, 0x14, 0x34}, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0xd, [{@multicast1, 0x3f}]}, @timestamp_addr={0x44, 0x54, 0xb5, 0x1, 0x3, [{@private=0xa010100, 0xf9e}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x80000000}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x2}, {@private=0xa010101, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x9}, {@private=0xa010101, 0x36a}, {@multicast2, 0x9}]}, @cipso={0x86, 0x1b, 0x0, [{0x7, 0x9, "062048652e539a"}, {0x0, 0x4, "8223"}, {0x5, 0x8, "d433500bc840"}]}, @lsrr={0x83, 0x1b, 0xb8, [@empty, @multicast2, @loopback, @local, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xd3, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@multicast2, 0x401}, {@remote, 0x8000}, {@broadcast, 0xa6}]}, @ssrr={0x89, 0x1b, 0xe7, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @loopback, @multicast2, @private=0xa010100]}, @ssrr={0x89, 0xf, 0xc4, [@private=0xfffffffd, @multicast2, @local]}]}}}}}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:10 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f00000002c0), 0x100, 0x141000) ioctl$FIONCLEX(r1, 0x5450) (async) ioctl$FIONCLEX(r1, 0x5450) socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000000)={0x1, 0x3, 0x9}) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = dup(0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x29, 0x2, 0x7f) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {r7}}, './file0\x00'}) r8 = dup(r3) ioctl$DRM_IOCTL_SET_SAREA_CTX(r8, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000200)=""/31}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r8, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000200)=""/31}) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="3c8d255fa54015915a8cb18a65e3d7f766a9c78e0d203a0d00dcaeaf1dc0e7ef9aa8283ccde5183c92e1d61ecd2a8e46cd6cd5e1b8dd433705cd354e2cb6c2ece6e7e83d1eb8a8c61700736446c3d4789d439a4550ad0ce2757be24fd9ce0442211d94e52bb9c587c340257e4113880d2cc00f3df8006f434985061d870755ca23c76c89eb4d69239d66f46bed017666aca33e8e0203bf39e222137ade2e6fafeee218a06eee481617554a", @ANYRES64=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="3c8d255fa54015915a8cb18a65e3d7f766a9c78e0d203a0d00dcaeaf1dc0e7ef9aa8283ccde5183c92e1d61ecd2a8e46cd6cd5e1b8dd433705cd354e2cb6c2ece6e7e83d1eb8a8c61700736446c3d4789d439a4550ad0ce2757be24fd9ce0442211d94e52bb9c587c340257e4113880d2cc00f3df8006f434985061d870755ca23c76c89eb4d69239d66f46bed017666aca33e8e0203bf39e222137ade2e6fafeee218a06eee481617554a", @ANYRES64=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) (async) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) 23:07:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r5) socket(0x18, 0x0, 0x41) (async) r7 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) (async) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r6, 0x300, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r6, 0x300, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r8 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, 0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x458, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xef}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:10 executing program 3: socketpair(0x2b, 0x6, 0x0, 0x0) (async) socketpair(0x2b, 0x6, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 23:07:10 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FIONCLEX(r0, 0x5450) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) write$vhost_msg_v2(r1, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f0000000100)=""/179, 0xb3, &(0x7f00000001c0)=""/255, 0x1, 0x3}}, 0x48) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) 23:07:10 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r4) write$vhost_msg(r4, &(0x7f0000000100)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8e4af5831dbacdeb, 0x3}}, 0x48) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) dup(r1) (async) dup(r2) (async) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r4) (async) write$vhost_msg(r4, &(0x7f0000000100)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8e4af5831dbacdeb, 0x3}}, 0x48) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) 23:07:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r1, 0x40, 0x20, 0xfffffc8a, 0x80, {{0x45, 0x4, 0x0, 0x1a, 0x114, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @local, {[@rr={0x7, 0x1b, 0x59, [@dev={0xac, 0x14, 0x14, 0x34}, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0xd, [{@multicast1, 0x3f}]}, @timestamp_addr={0x44, 0x54, 0xb5, 0x1, 0x3, [{@private=0xa010100, 0xf9e}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x80000000}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x2}, {@private=0xa010101, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x9}, {@private=0xa010101, 0x36a}, {@multicast2, 0x9}]}, @cipso={0x86, 0x1b, 0x0, [{0x7, 0x9, "062048652e539a"}, {0x0, 0x4, "8223"}, {0x5, 0x8, "d433500bc840"}]}, @lsrr={0x83, 0x1b, 0xb8, [@empty, @multicast2, @loopback, @local, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xd3, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@multicast2, 0x401}, {@remote, 0x8000}, {@broadcast, 0xa6}]}, @ssrr={0x89, 0x1b, 0xe7, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @loopback, @multicast2, @private=0xa010100]}, @ssrr={0x89, 0xf, 0xc4, [@private=0xfffffffd, @multicast2, @local]}]}}}}}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r5) r7 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, 0x0, 0x80) (async) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r6, 0x300, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r8 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, 0x0, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x458, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xef}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) (async) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4ba) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0xfffffffd, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x2c}}, 0x40880) 23:07:10 executing program 3: socketpair(0x2b, 0x6, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 23:07:10 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 23:07:10 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FIONCLEX(r0, 0x5450) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) write$vhost_msg_v2(r1, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f0000000100)=""/179, 0xb3, &(0x7f00000001c0)=""/255, 0x1, 0x3}}, 0x48) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) 23:07:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x7, 0x0, 0x0, @broadcast, @private, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private}, {@loopback}]}, @ra={0x94, 0x4}]}}}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x4000}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x2, 0x3f, 0x1, 0x84000}) 23:07:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4ba) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0xfffffffd, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x2c}}, 0x40880) 23:07:11 executing program 0: syz_open_dev$mouse(&(0x7f0000000040), 0x101, 0x38d082) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x80) r2 = socket(0x18, 0x3, 0x8001) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) 23:07:11 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 23:07:11 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FIONCLEX(r0, 0x5450) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) write$vhost_msg_v2(r1, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f0000000100)=""/179, 0xb3, &(0x7f00000001c0)=""/255, 0x1, 0x3}}, 0x48) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$FIONCLEX(r0, 0x5450) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) write$vhost_msg_v2(r1, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f0000000100)=""/179, 0xb3, &(0x7f00000001c0)=""/255, 0x1, 0x3}}, 0x48) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) (async) 23:07:11 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) recvfrom$l2tp(r4, &(0x7f0000000180)=""/4096, 0x1000, 0x0, &(0x7f0000001180)={0x2, 0x0, @initdev}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8090}, 0x8020) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x1) (rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x7, 0x0, 0x0, @broadcast, @private, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private}, {@loopback}]}, @ra={0x94, 0x4}]}}}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x4000}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async, rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x2, 0x3f, 0x1, 0x84000}) (rerun: 32) 23:07:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4ba) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0xfffffffd, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x2c}}, 0x40880) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4ba) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0xfffffffd, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x2c}}, 0x40880) (async) 23:07:11 executing program 0: syz_open_dev$mouse(&(0x7f0000000040), 0x101, 0x38d082) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x80) (async) r2 = socket(0x18, 0x3, 0x8001) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) 23:07:11 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 23:07:11 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0xfffffffffffffdb3, 0x0, 0x3, 0x4}}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) write$vhost_msg(r1, &(0x7f0000001200)={0x1, {&(0x7f0000000100)=""/228, 0xe4, &(0x7f0000000200)=""/4096, 0x1, 0x2}}, 0x48) 23:07:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x63}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:11 executing program 0: syz_open_dev$mouse(&(0x7f0000000040), 0x101, 0x38d082) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x80) (async) r2 = socket(0x18, 0x3, 0x8001) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) 23:07:11 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0xfffffffffffffdb3, 0x0, 0x3, 0x4}}, 0x48) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) write$vhost_msg(r1, &(0x7f0000001200)={0x1, {&(0x7f0000000100)=""/228, 0xe4, &(0x7f0000000200)=""/4096, 0x1, 0x2}}, 0x48) 23:07:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x7, 0x0, 0x0, @broadcast, @private, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private}, {@loopback}]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x7, 0x0, 0x0, @broadcast, @private, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private}, {@loopback}]}, @ra={0x94, 0x4}]}}}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x4000}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x2, 0x3f, 0x1, 0x84000}) 23:07:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0xffffffce}) 23:07:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x309000, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x4c, r1, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x12}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4040882) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x89880, 0x0) write$cgroup_pressure(r3, &(0x7f0000000040)={'some', 0x20, 0x8, 0x20, 0x7}, 0x2f) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:12 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) (async) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) recvfrom$l2tp(r4, &(0x7f0000000180)=""/4096, 0x1000, 0x0, &(0x7f0000001180)={0x2, 0x0, @initdev}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8090}, 0x8020) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:12 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0xfffffffffffffdb3, 0x0, 0x3, 0x4}}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) write$vhost_msg(r1, &(0x7f0000001200)={0x1, {&(0x7f0000000100)=""/228, 0xe4, &(0x7f0000000200)=""/4096, 0x1, 0x2}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0xfffffffffffffdb3, 0x0, 0x3, 0x4}}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) write$vhost_msg(r1, &(0x7f0000001200)={0x1, {&(0x7f0000000100)=""/228, 0xe4, &(0x7f0000000200)=""/4096, 0x1, 0x2}}, 0x48) (async) 23:07:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x63}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0xffffffce}) 23:07:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x309000, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x4c, r1, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x12}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4040882) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x89880, 0x0) write$cgroup_pressure(r3, &(0x7f0000000040)={'some', 0x20, 0x8, 0x20, 0x7}, 0x2f) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:12 executing program 3: socketpair(0xa, 0x6, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x2, 0xff, 0x2, 0x8, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f00000004c0)}, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddb06252a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020026bd7000fedbdf250c00000005003500fd00000008000600", @ANYRES32=0x0, @ANYBLOB="0300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001040)={0x14, 0x0, 0xc01}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x44}}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8dfc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20046850}, 0x24040814) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {r6}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x372}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048080) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="341f295951f7003cd6644616758b05d5ab62037f8f4e6e7998b9e4865a08c5f27996e5cb6208bb1704542a3f82c3b084623fd3b9d2d7226514084fc45818b1116615139406740e0bdd68fb6b9a2112", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250a00000008003b000900000005002a0001000000050033000200000005002d0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000180)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008840}, 0x90) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000000)=""/77, 0x4d, 0x43, &(0x7f0000000080)={0x2, 0x0, @private}, 0x10) 23:07:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0xffffffce}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0xffffffce}) (async) 23:07:12 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xffffff95, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x4, 0x20, 0x8000000000000001}, 0x2f) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000100)='/dev/vhost-net\x00') ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x2, r2}) 23:07:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x309000, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x4c, r1, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x12}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4040882) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x89880, 0x0) write$cgroup_pressure(r3, &(0x7f0000000040)={'some', 0x20, 0x8, 0x20, 0x7}, 0x2f) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x63}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x63}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:12 executing program 3: socketpair(0xa, 0x6, 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x2, 0xff, 0x2, 0x8, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f00000004c0)}, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddb06252a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020026bd7000fedbdf250c00000005003500fd00000008000600", @ANYRES32=0x0, @ANYBLOB="0300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001040)={0x14, 0x0, 0xc01}, 0x14}}, 0x0) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x44}}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8dfc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20046850}, 0x24040814) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {r6}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x372}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048080) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="341f295951f7003cd6644616758b05d5ab62037f8f4e6e7998b9e4865a08c5f27996e5cb6208bb1704542a3f82c3b084623fd3b9d2d7226514084fc45818b1116615139406740e0bdd68fb6b9a2112", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250a00000008003b000900000005002a0001000000050033000200000005002d0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000180)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008840}, 0x90) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000000)=""/77, 0x4d, 0x43, &(0x7f0000000080)={0x2, 0x0, @private}, 0x10) 23:07:12 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xffffff95, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x4, 0x20, 0x8000000000000001}, 0x2f) (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000100)='/dev/vhost-net\x00') (async) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x2, r2}) 23:07:13 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) recvfrom$l2tp(r4, &(0x7f0000000180)=""/4096, 0x1000, 0x0, &(0x7f0000001180)={0x2, 0x0, @initdev}, 0x10) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8090}, 0x8020) (rerun: 64) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000c000016d5e9f40d8668df050000000500210000000000"], 0x1c}}, 0x0) 23:07:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000012455bb01db1b2bc0f34284bab2e23b10bf0f53be6ad092469d76f70ece742cbbd0f816622db06ae784fdd8f995afa9d4f99844c33db65b0209b01b8915b37e062e411a76de3", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000000) 23:07:13 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xffffff95, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x4, 0x20, 0x8000000000000001}, 0x2f) (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000100)='/dev/vhost-net\x00') ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x2, r2}) 23:07:13 executing program 3: socketpair(0xa, 0x6, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x2, 0xff, 0x2, 0x8, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f00000004c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f00000004c0)}, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddb06252a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020026bd7000fedbdf250c00000005003500fd00000008000600", @ANYRES32=0x0, @ANYBLOB="0300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020026bd7000fedbdf250c00000005003500fd00000008000600", @ANYRES32=0x0, @ANYBLOB="0300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001040)={0x14, 0x0, 0xc01}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x44}}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8dfc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20046850}, 0x24040814) (async) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8dfc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20046850}, 0x24040814) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {r6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {r6}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x372}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048080) (async) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x372}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048080) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="341f295951f7003cd6644616758b05d5ab62037f8f4e6e7998b9e4865a08c5f27996e5cb6208bb1704542a3f82c3b084623fd3b9d2d7226514084fc45818b1116615139406740e0bdd68fb6b9a2112", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250a00000008003b000900000005002a0001000000050033000200000005002d0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="341f295951f7003cd6644616758b05d5ab62037f8f4e6e7998b9e4865a08c5f27996e5cb6208bb1704542a3f82c3b084623fd3b9d2d7226514084fc45818b1116615139406740e0bdd68fb6b9a2112", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250a00000008003b000900000005002a0001000000050033000200000005002d0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000180)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008840}, 0x90) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000000)=""/77, 0x4d, 0x43, &(0x7f0000000080)={0x2, 0x0, @private}, 0x10) 23:07:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000c000016d5e9f40d8668df050000000500210000000000"], 0x1c}}, 0x0) 23:07:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000012455bb01db1b2bc0f34284bab2e23b10bf0f53be6ad092469d76f70ece742cbbd0f816622db06ae784fdd8f995afa9d4f99844c33db65b0209b01b8915b37e062e411a76de3", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000012455bb01db1b2bc0f34284bab2e23b10bf0f53be6ad092469d76f70ece742cbbd0f816622db06ae784fdd8f995afa9d4f99844c33db65b0209b01b8915b37e062e411a76de3", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x4) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000000) (async) 23:07:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:13 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000c000016d5e9f40d8668df050000000500210000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000c000016d5e9f40d8668df050000000500210000000000"], 0x1c}}, 0x0) (async) 23:07:13 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x60008000, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240000c0}, 0x24000044) 23:07:13 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc4aa613488359c62, 0x0) r2 = dup(r1) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 23:07:13 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:13 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000012455bb01db1b2bc0f34284bab2e23b10bf0f53be6ad092469d76f70ece742cbbd0f816622db06ae784fdd8f995afa9d4f99844c33db65b0209b01b8915b37e062e411a76de3", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x4) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000000) 23:07:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:13 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x60008000, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240000c0}, 0x24000044) 23:07:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) 23:07:14 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0xab, 0x4e0c00) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="e0000002010000006000000000000000ac1414aa00000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000000000000001000000000000"]}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xfffffffa, 0x8000000}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000180)=[0x8, 0x1], &(0x7f00000002c0)=[0x9654], 0x119269419585e16c, 0x0, 0x3ff, &(0x7f0000000300), &(0x7f0000000340)=[0x6, 0x6, 0x200, 0x6, 0x0, 0x400, 0x0]}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 23:07:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) 23:07:14 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x60008000, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240000c0}, 0x24000044) 23:07:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5106}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettaction={0x9c, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xccf7}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24084001) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) 23:07:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0xab, 0x4e0c00) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="e0000002010000006000000000000000ac1414aa00000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000000000000001000000000000"]}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xfffffffa, 0x8000000}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000180)=[0x8, 0x1], &(0x7f00000002c0)=[0x9654], 0x119269419585e16c, 0x0, 0x3ff, &(0x7f0000000300), &(0x7f0000000340)=[0x6, 0x6, 0x200, 0x6, 0x0, 0x400, 0x0]}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 23:07:14 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc4aa613488359c62, 0x0) r2 = dup(r1) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 23:07:14 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0x3, 0x2, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) iopl(0xf9) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000326bd7000fddbdf2505000000080018000000000008000a00010000000600010005000000050014002000000008000a00040000001400080076657468315f6d616376746170120000773624186f846d91795ba1b23727200f5132ec0310fd2dbe0c2e798c70bc2dfc98d7e24967119ef9b8d7913147bd55392e5d067a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4048001) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) 23:07:14 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 23:07:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5106}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettaction={0x9c, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xccf7}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24084001) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5106}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettaction={0x9c, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xccf7}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24084001) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) (async) 23:07:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0xab, 0x4e0c00) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="e0000002010000006000000000000000ac1414aa00000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000000000000001000000000000"]}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xfffffffa, 0x8000000}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) (async) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000180)=[0x8, 0x1], &(0x7f00000002c0)=[0x9654], 0x119269419585e16c, 0x0, 0x3ff, &(0x7f0000000300), &(0x7f0000000340)=[0x6, 0x6, 0x200, 0x6, 0x0, 0x400, 0x0]}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 23:07:14 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socketpair(0xa, 0x6, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) 23:07:14 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup(r0) (async) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0x3, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) iopl(0xf9) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000326bd7000fddbdf2505000000080018000000000008000a00010000000600010005000000050014002000000008000a00040000001400080076657468315f6d616376746170120000773624186f846d91795ba1b23727200f5132ec0310fd2dbe0c2e798c70bc2dfc98d7e24967119ef9b8d7913147bd55392e5d067a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4048001) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x11ac145e4165b730}) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:07:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socketpair(0x8, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x90080800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x20044000) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c024000e618e394e4a619ee94f18dfe847fa8d2a340c8fa69918acda47257d65f6eb3f0bccf4368ced73113c597a97dc3b9bf26cb47cb7b3f03447e11262e1c48aecf60e3be95515c9ee2daaf1020be00cd609adc1082bfcc3907122ba47748b1a1e9b44b9b509808a64b7e1c6804686fdac8c70ae2e202d1c6f7f411f652916c033b92792a5fdb33b643a413882f886862a09a6c3147cc2ce912550ff1b6d6bde8559b3a5e7a3707e90736c5e35e582e9b1cafb8b3e98e1e4610468fd48def3ae4185875f9d9eb0812dbca84893a0ef0640cf0d3225c1feda5af283c77fac4f6cf5c5cec", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25050000000500210000000000"], 0x1c}}, 0x0) 23:07:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5106}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettaction={0x9c, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xccf7}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24084001) (async, rerun: 64) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (rerun: 64) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) 23:07:15 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0x3, 0x2, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) iopl(0xf9) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000326bd7000fddbdf2505000000080018000000000008000a00010000000600010005000000050014002000000008000a00040000001400080076657468315f6d616376746170120000773624186f846d91795ba1b23727200f5132ec0310fd2dbe0c2e798c70bc2dfc98d7e24967119ef9b8d7913147bd55392e5d067a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4048001) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:15 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc4aa613488359c62, 0x0) r2 = dup(r1) dup(r2) (async) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 23:07:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socketpair(0x8, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x90080800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x20044000) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c024000e618e394e4a619ee94f18dfe847fa8d2a340c8fa69918acda47257d65f6eb3f0bccf4368ced73113c597a97dc3b9bf26cb47cb7b3f03447e11262e1c48aecf60e3be95515c9ee2daaf1020be00cd609adc1082bfcc3907122ba47748b1a1e9b44b9b509808a64b7e1c6804686fdac8c70ae2e202d1c6f7f411f652916c033b92792a5fdb33b643a413882f886862a09a6c3147cc2ce912550ff1b6d6bde8559b3a5e7a3707e90736c5e35e582e9b1cafb8b3e98e1e4610468fd48def3ae4185875f9d9eb0812dbca84893a0ef0640cf0d3225c1feda5af283c77fac4f6cf5c5cec", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25050000000500210000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) socketpair(0x8, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x90080800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x20044000) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c024000e618e394e4a619ee94f18dfe847fa8d2a340c8fa69918acda47257d65f6eb3f0bccf4368ced73113c597a97dc3b9bf26cb47cb7b3f03447e11262e1c48aecf60e3be95515c9ee2daaf1020be00cd609adc1082bfcc3907122ba47748b1a1e9b44b9b509808a64b7e1c6804686fdac8c70ae2e202d1c6f7f411f652916c033b92792a5fdb33b643a413882f886862a09a6c3147cc2ce912550ff1b6d6bde8559b3a5e7a3707e90736c5e35e582e9b1cafb8b3e98e1e4610468fd48def3ae4185875f9d9eb0812dbca84893a0ef0640cf0d3225c1feda5af283c77fac4f6cf5c5cec", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25050000000500210000000000"], 0x1c}}, 0x0) (async) 23:07:15 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 23:07:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x11ac145e4165b730}) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x11ac145e4165b730}) (async) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) 23:07:15 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) 23:07:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socketpair(0x0, 0x809, 0x1, &(0x7f0000000040)) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000002000000000050000000500020000000000"], 0x1c}}, 0x0) 23:07:15 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) 23:07:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) socketpair(0x8, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x90080800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x20044000) (async, rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c024000e618e394e4a619ee94f18dfe847fa8d2a340c8fa69918acda47257d65f6eb3f0bccf4368ced73113c597a97dc3b9bf26cb47cb7b3f03447e11262e1c48aecf60e3be95515c9ee2daaf1020be00cd609adc1082bfcc3907122ba47748b1a1e9b44b9b509808a64b7e1c6804686fdac8c70ae2e202d1c6f7f411f652916c033b92792a5fdb33b643a413882f886862a09a6c3147cc2ce912550ff1b6d6bde8559b3a5e7a3707e90736c5e35e582e9b1cafb8b3e98e1e4610468fd48def3ae4185875f9d9eb0812dbca84893a0ef0640cf0d3225c1feda5af283c77fac4f6cf5c5cec", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25050000000500210000000000"], 0x1c}}, 0x0) 23:07:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x11ac145e4165b730}) (async) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:07:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socketpair(0x0, 0x809, 0x1, &(0x7f0000000040)) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000002000000000050000000500020000000000"], 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000002000000000050000000500020000000000"], 0x1c}}, 0x0) 23:07:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x890}, 0x20000000) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 23:07:16 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) 23:07:16 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x40}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0c0}, 0x20000040) r2 = dup(r0) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:16 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x3, 0x400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000380)={0xa, &(0x7f0000000300)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000480)={r2, &(0x7f00000003c0)=""/134}) r3 = syz_open_dev$dri(&(0x7f00000004c0), 0x100, 0x46400) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000500)={r0, 0x2}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000100)="3f909fd27ec46a4c59bd869ab102e8d533334d09c704c6c6939e9c29cd16461b6329c46fa448927aadf5a008dcc4327523bf5cac6bfd97b608cf6c00ab4289bdd55c794fb66283e3c26572e2") socketpair(0xa, 0x6, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8000000000000000, 0x800) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000700)={r5, 0x2, &(0x7f0000000600)=[0x5, 0x71], &(0x7f0000000640)=[0xd1d, 0x6, 0x2, 0xfffffffe, 0x0, 0xffff633f, 0x6, 0x20], 0x2, 0x6, 0xfff, &(0x7f0000000680)=[0x1e, 0x6, 0x93af, 0x3, 0x80000001, 0x6], &(0x7f00000006c0)=[0xffff, 0x2, 0x4, 0x401, 0x800, 0x5, 0xffffffff]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xc0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c005}, 0x8080) 23:07:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) socketpair(0x0, 0x809, 0x1, &(0x7f0000000040)) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000002000000000050000000500020000000000"], 0x1c}}, 0x0) 23:07:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) syz_open_dev$vcsa(&(0x7f0000000a80), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80), 0x3b062ab1e99b25d4, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000001040), 0x1, 0x127400) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:16 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x890}, 0x20000000) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) (async) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 23:07:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xbe4c}]}, 0x1c}}, 0x20000000) 23:07:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xbe4c}]}, 0x1c}}, 0x20000000) 23:07:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) syz_open_dev$vcsa(&(0x7f0000000a80), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80), 0x3b062ab1e99b25d4, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000001040), 0x1, 0x127400) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) (async) clock_gettime(0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) syz_open_dev$vcsa(&(0x7f0000000a80), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), 0xffffffffffffffff) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80), 0x3b062ab1e99b25d4, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) (async) syz_open_dev$vcsa(&(0x7f0000001040), 0x1, 0x127400) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) 23:07:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x890}, 0x20000000) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 23:07:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01e8ffffff00000000000500000005002100000000003499e43f76fb4a66ca95e2b0094864a4e83e7c390369f8b33efd27d7bb0f26edb2096a4aacdbf45e0902c45509aaa7b2e080bb9fe72dcd2f254c60ab836197f46d6ad1a5c2d30d36ad52147f8a1a88736b5c55a305bb87cd7e2b056938615095e3cf0ea9fb5aa3401de7bace2a37d5c0ed61ab9cf95af8e7d4f0ac422dc88088907eb3416e4a676dd05e27c524986c7fcb031447c353026fc9a518d94404e06916b2a1e05f5c15c1fee25b979e9fa2c9e2f468b7cd9452c099e0374e9ef698c33c563b5018d7d136fd4714ab0249100af58c30c3083374e89aa7aec99126af55f239b3"], 0x1c}}, 0x0) 23:07:16 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x3, 0x400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000380)={0xa, &(0x7f0000000300)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000480)={r2, &(0x7f00000003c0)=""/134}) r3 = syz_open_dev$dri(&(0x7f00000004c0), 0x100, 0x46400) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000500)={r0, 0x2}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000100)="3f909fd27ec46a4c59bd869ab102e8d533334d09c704c6c6939e9c29cd16461b6329c46fa448927aadf5a008dcc4327523bf5cac6bfd97b608cf6c00ab4289bdd55c794fb66283e3c26572e2") socketpair(0xa, 0x6, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8000000000000000, 0x800) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000700)={r5, 0x2, &(0x7f0000000600)=[0x5, 0x71], &(0x7f0000000640)=[0xd1d, 0x6, 0x2, 0xfffffffe, 0x0, 0xffff633f, 0x6, 0x20], 0x2, 0x6, 0xfff, &(0x7f0000000680)=[0x1e, 0x6, 0x93af, 0x3, 0x80000001, 0x6], &(0x7f00000006c0)=[0xffff, 0x2, 0x4, 0x401, 0x800, 0x5, 0xffffffff]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xc0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c005}, 0x8080) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x3, 0x400) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000380)={0xa, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000480)={r2, &(0x7f00000003c0)=""/134}) (async) syz_open_dev$dri(&(0x7f00000004c0), 0x100, 0x46400) (async) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000500)={r0, 0x2}) (async) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000100)="3f909fd27ec46a4c59bd869ab102e8d533334d09c704c6c6939e9c29cd16461b6329c46fa448927aadf5a008dcc4327523bf5cac6bfd97b608cf6c00ab4289bdd55c794fb66283e3c26572e2") (async) socketpair(0xa, 0x6, 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000540), 0x8000000000000000, 0x800) (async) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000700)={r5, 0x2, &(0x7f0000000600)=[0x5, 0x71], &(0x7f0000000640)=[0xd1d, 0x6, 0x2, 0xfffffffe, 0x0, 0xffff633f, 0x6, 0x20], 0x2, 0x6, 0xfff, &(0x7f0000000680)=[0x1e, 0x6, 0x93af, 0x3, 0x80000001, 0x6], &(0x7f00000006c0)=[0xffff, 0x2, 0x4, 0x401, 0x800, 0x5, 0xffffffff]}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xc0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c005}, 0x8080) (async) 23:07:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xbe4c}]}, 0x1c}}, 0x20000000) 23:07:17 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x40}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0c0}, 0x20000040) dup(r0) (async) r2 = dup(r0) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:17 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x2, 0x0, 0x80}) prctl$PR_SET_FPEXC(0xc, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004044) 23:07:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) syz_open_dev$vcsa(&(0x7f0000000a80), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80), 0x3b062ab1e99b25d4, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) (async) syz_open_dev$vcsa(&(0x7f0000001040), 0x1, 0x127400) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01e8ffffff00000000000500000005002100000000003499e43f76fb4a66ca95e2b0094864a4e83e7c390369f8b33efd27d7bb0f26edb2096a4aacdbf45e0902c45509aaa7b2e080bb9fe72dcd2f254c60ab836197f46d6ad1a5c2d30d36ad52147f8a1a88736b5c55a305bb87cd7e2b056938615095e3cf0ea9fb5aa3401de7bace2a37d5c0ed61ab9cf95af8e7d4f0ac422dc88088907eb3416e4a676dd05e27c524986c7fcb031447c353026fc9a518d94404e06916b2a1e05f5c15c1fee25b979e9fa2c9e2f468b7cd9452c099e0374e9ef698c33c563b5018d7d136fd4714ab0249100af58c30c3083374e89aa7aec99126af55f239b3"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01e8ffffff00000000000500000005002100000000003499e43f76fb4a66ca95e2b0094864a4e83e7c390369f8b33efd27d7bb0f26edb2096a4aacdbf45e0902c45509aaa7b2e080bb9fe72dcd2f254c60ab836197f46d6ad1a5c2d30d36ad52147f8a1a88736b5c55a305bb87cd7e2b056938615095e3cf0ea9fb5aa3401de7bace2a37d5c0ed61ab9cf95af8e7d4f0ac422dc88088907eb3416e4a676dd05e27c524986c7fcb031447c353026fc9a518d94404e06916b2a1e05f5c15c1fee25b979e9fa2c9e2f468b7cd9452c099e0374e9ef698c33c563b5018d7d136fd4714ab0249100af58c30c3083374e89aa7aec99126af55f239b3"], 0x1c}}, 0x0) (async) 23:07:17 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x3, 0x400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000380)={0xa, &(0x7f0000000300)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000480)={r2, &(0x7f00000003c0)=""/134}) r3 = syz_open_dev$dri(&(0x7f00000004c0), 0x100, 0x46400) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000500)={r0, 0x2}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000100)="3f909fd27ec46a4c59bd869ab102e8d533334d09c704c6c6939e9c29cd16461b6329c46fa448927aadf5a008dcc4327523bf5cac6bfd97b608cf6c00ab4289bdd55c794fb66283e3c26572e2") socketpair(0xa, 0x6, 0x0, 0x0) (async) socketpair(0xa, 0x6, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8000000000000000, 0x800) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000700)={r5, 0x2, &(0x7f0000000600)=[0x5, 0x71], &(0x7f0000000640)=[0xd1d, 0x6, 0x2, 0xfffffffe, 0x0, 0xffff633f, 0x6, 0x20], 0x2, 0x6, 0xfff, &(0x7f0000000680)=[0x1e, 0x6, 0x93af, 0x3, 0x80000001, 0x6], &(0x7f00000006c0)=[0xffff, 0x2, 0x4, 0x401, 0x800, 0x5, 0xffffffff]}) (async) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000700)={r5, 0x2, &(0x7f0000000600)=[0x5, 0x71], &(0x7f0000000640)=[0xd1d, 0x6, 0x2, 0xfffffffe, 0x0, 0xffff633f, 0x6, 0x20], 0x2, 0x6, 0xfff, &(0x7f0000000680)=[0x1e, 0x6, 0x93af, 0x3, 0x80000001, 0x6], &(0x7f00000006c0)=[0xffff, 0x2, 0x4, 0x401, 0x800, 0x5, 0xffffffff]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xc0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c005}, 0x8080) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xc0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c005}, 0x8080) 23:07:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000016d4789fa4715e56037a5acc0aa32be405d7ef3674f9862fad7b600b1b34355fb7cb113f58dc1f1bb19400ff3ebe51c4956dcdb26938f583b04a0edab860b4afe8", @ANYRES16=r1, @ANYBLOB="01000000000000000200050000000500210000000000"], 0x1c}}, 0x0) 23:07:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000016d4789fa4715e56037a5acc0aa32be405d7ef3674f9862fad7b600b1b34355fb7cb113f58dc1f1bb19400ff3ebe51c4956dcdb26938f583b04a0edab860b4afe8", @ANYRES16=r1, @ANYBLOB="01000000000000000200050000000500210000000000"], 0x1c}}, 0x0) 23:07:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01e8ffffff00000000000500000005002100000000003499e43f76fb4a66ca95e2b0094864a4e83e7c390369f8b33efd27d7bb0f26edb2096a4aacdbf45e0902c45509aaa7b2e080bb9fe72dcd2f254c60ab836197f46d6ad1a5c2d30d36ad52147f8a1a88736b5c55a305bb87cd7e2b056938615095e3cf0ea9fb5aa3401de7bace2a37d5c0ed61ab9cf95af8e7d4f0ac422dc88088907eb3416e4a676dd05e27c524986c7fcb031447c353026fc9a518d94404e06916b2a1e05f5c15c1fee25b979e9fa2c9e2f468b7cd9452c099e0374e9ef698c33c563b5018d7d136fd4714ab0249100af58c30c3083374e89aa7aec99126af55f239b3"], 0x1c}}, 0x0) 23:07:17 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000100)=""/80, 0x50, &(0x7f0000000180)=""/85, 0x1, 0x1}}, 0x48) 23:07:17 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x2, 0x0, 0x80}) prctl$PR_SET_FPEXC(0xc, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004044) syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x40) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x2, 0x0, 0x80}) (async) prctl$PR_SET_FPEXC(0xc, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004044) (async) 23:07:17 executing program 3: write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040)=""/209, 0xd1, &(0x7f0000000140)=""/4, 0x1, 0x2}}, 0x48) socketpair(0x3, 0x3, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 23:07:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000016d4789fa4715e56037a5acc0aa32be405d7ef3674f9862fad7b600b1b34355fb7cb113f58dc1f1bb19400ff3ebe51c4956dcdb26938f583b04a0edab860b4afe8", @ANYRES16=r1, @ANYBLOB="01000000000000000200050000000500210000000000"], 0x1c}}, 0x0) 23:07:18 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x40}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0c0}, 0x20000040) (async) r2 = dup(r0) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:18 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000100)=""/80, 0x50, &(0x7f0000000180)=""/85, 0x1, 0x1}}, 0x48) 23:07:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x2, 0x0, 0x80}) (async) prctl$PR_SET_FPEXC(0xc, 0x1) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004044) (rerun: 64) 23:07:18 executing program 3: write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040)=""/209, 0xd1, &(0x7f0000000140)=""/4, 0x1, 0x2}}, 0x48) socketpair(0x3, 0x3, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040)=""/209, 0xd1, &(0x7f0000000140)=""/4, 0x1, 0x2}}, 0x48) (async) socketpair(0x3, 0x3, 0x0, 0x0) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) 23:07:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x4, 0xe81, {{0x16, 0x4, 0x2, 0x21, 0x58, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x43, 0x2, [{0x0, 0xc, "d4af33f1e659e1ab3d41"}, {0x2, 0x3, '\x00'}, {0x533f500629fbf846, 0xd, "a0e494b8936a170c54b485"}, {0x7, 0x12, "1b3605fb63f2036cca8fc816245160af"}, {0xa15fcd873a617e61, 0x4, "d361"}, {0x0, 0xb, "27068f1e09b3d8031a"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="84030000", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b00102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725fb9000000000000006e61626c6564000000000000000000000000000500030006000000f2ff040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b00102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB], 0x384}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000002e471f8550497169b5bd3d8df28772f1cd131cda9bf12ef1084ef26f2cfc537cfc7699772be14e24", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000da1c9e6fbb50142d11b55ab8a85b156a75b27df90690f80fc93871223979c9ccd96976ffc70655bf188273017ec132c68d6a6f913a220395ab39b2b3bec65fff9379a5db8c7338aed58473ca1daa9563dc6f25a2bba50f12b294a5039db7fd2064fe49f0ae2253117ed916cd0a248a078ba97320"], 0x1c}}, 0x0) 23:07:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:18 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000100)=""/80, 0x50, &(0x7f0000000180)=""/85, 0x1, 0x1}}, 0x48) 23:07:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x4, 0xe81, {{0x16, 0x4, 0x2, 0x21, 0x58, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x43, 0x2, [{0x0, 0xc, "d4af33f1e659e1ab3d41"}, {0x2, 0x3, '\x00'}, {0x533f500629fbf846, 0xd, "a0e494b8936a170c54b485"}, {0x7, 0x12, "1b3605fb63f2036cca8fc816245160af"}, {0xa15fcd873a617e61, 0x4, "d361"}, {0x0, 0xb, "27068f1e09b3d8031a"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="84030000", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b00102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725fb9000000000000006e61626c6564000000000000000000000000000500030006000000f2ff040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b00102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB], 0x384}}, 0x0) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000002e471f8550497169b5bd3d8df28772f1cd131cda9bf12ef1084ef26f2cfc537cfc7699772be14e24", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000da1c9e6fbb50142d11b55ab8a85b156a75b27df90690f80fc93871223979c9ccd96976ffc70655bf188273017ec132c68d6a6f913a220395ab39b2b3bec65fff9379a5db8c7338aed58473ca1daa9563dc6f25a2bba50f12b294a5039db7fd2064fe49f0ae2253117ed916cd0a248a078ba97320"], 0x1c}}, 0x0) 23:07:18 executing program 1: connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x3}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xf7e51b58ec661fe, 0x2, 0x0, 0x685542635d38c74b}) 23:07:18 executing program 3: write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040)=""/209, 0xd1, &(0x7f0000000140)=""/4, 0x1, 0x2}}, 0x48) (async) socketpair(0x3, 0x3, 0x0, 0x0) (async, rerun: 64) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (rerun: 64) 23:07:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:19 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000080)={r3, 0x2}) r4 = dup(r1) r5 = dup(r4) recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x4, 0xe81, {{0x16, 0x4, 0x2, 0x21, 0x58, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x43, 0x2, [{0x0, 0xc, "d4af33f1e659e1ab3d41"}, {0x2, 0x3, '\x00'}, {0x533f500629fbf846, 0xd, "a0e494b8936a170c54b485"}, {0x7, 0x12, "1b3605fb63f2036cca8fc816245160af"}, {0xa15fcd873a617e61, 0x4, "d361"}, {0x0, 0xb, "27068f1e09b3d8031a"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="84030000", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b00102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725fb9000000000000006e61626c6564000000000000000000000000000500030006000000f2ff040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b00102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB], 0x384}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000002e471f8550497169b5bd3d8df28772f1cd131cda9bf12ef1084ef26f2cfc537cfc7699772be14e24", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000da1c9e6fbb50142d11b55ab8a85b156a75b27df90690f80fc93871223979c9ccd96976ffc70655bf188273017ec132c68d6a6f913a220395ab39b2b3bec65fff9379a5db8c7338aed58473ca1daa9563dc6f25a2bba50f12b294a5039db7fd2064fe49f0ae2253117ed916cd0a248a078ba97320"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x4, 0xe81, {{0x16, 0x4, 0x2, 0x21, 0x58, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x43, 0x2, [{0x0, 0xc, "d4af33f1e659e1ab3d41"}, {0x2, 0x3, '\x00'}, {0x533f500629fbf846, 0xd, "a0e494b8936a170c54b485"}, {0x7, 0x12, "1b3605fb63f2036cca8fc816245160af"}, {0xa15fcd873a617e61, 0x4, "d361"}, {0x0, 0xb, "27068f1e09b3d8031a"}]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="84030000", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b00102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725fb9000000000000006e61626c6564000000000000000000000000000500030006000000f2ff040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b00102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB], 0x384}}, 0x0) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000002e471f8550497169b5bd3d8df28772f1cd131cda9bf12ef1084ef26f2cfc537cfc7699772be14e24", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000da1c9e6fbb50142d11b55ab8a85b156a75b27df90690f80fc93871223979c9ccd96976ffc70655bf188273017ec132c68d6a6f913a220395ab39b2b3bec65fff9379a5db8c7338aed58473ca1daa9563dc6f25a2bba50f12b294a5039db7fd2064fe49f0ae2253117ed916cd0a248a078ba97320"], 0x1c}}, 0x0) (async) 23:07:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x600088d4}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 23:07:19 executing program 1: connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x3}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xf7e51b58ec661fe, 0x2, 0x0, 0x685542635d38c74b}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x3}, 0x10) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xf7e51b58ec661fe, 0x2, 0x0, 0x685542635d38c74b}) (async) 23:07:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c7ff000000000000000000000000000000004cb06ecfd2bb750453a543f8812b72303097d899bc93479aae26817a52177c3be3814309c67eef02343aac5c7621cde08bdc89d56b8bc8dff701dd442847db7d854f616a3edd8b4bacf97ed7df5419a63f96999234a895e65e079d1d5543e10aa5000000000000000000", @ANYRES16=r1, @ANYBLOB="05f0210100000000"], 0x1c}}, 0x0) 23:07:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x600088d4}, 0x1) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 23:07:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:19 executing program 1: connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x3}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xf7e51b58ec661fe, 0x2, 0x0, 0x685542635d38c74b}) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xf7e51b58ec661fe, 0x2, 0x0, 0x685542635d38c74b}) 23:07:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c7ff000000000000000000000000000000004cb06ecfd2bb750453a543f8812b72303097d899bc93479aae26817a52177c3be3814309c67eef02343aac5c7621cde08bdc89d56b8bc8dff701dd442847db7d854f616a3edd8b4bacf97ed7df5419a63f96999234a895e65e079d1d5543e10aa5000000000000000000", @ANYRES16=r1, @ANYBLOB="05f0210100000000"], 0x1c}}, 0x0) 23:07:19 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000024", @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:07:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x600088d4}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 23:07:20 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = dup(r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000080)={r3, 0x2}) (async, rerun: 64) r4 = dup(r1) (rerun: 64) r5 = dup(r4) recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fc, 0x0, 0x0, 0x80}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x44282, 0x0) 23:07:20 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c7ff000000000000000000000000000000004cb06ecfd2bb750453a543f8812b72303097d899bc93479aae26817a52177c3be3814309c67eef02343aac5c7621cde08bdc89d56b8bc8dff701dd442847db7d854f616a3edd8b4bacf97ed7df5419a63f96999234a895e65e079d1d5543e10aa5000000000000000000", @ANYRES16=r1, @ANYBLOB="05f0210100000000"], 0x1c}}, 0x0) 23:07:20 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000024", @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:07:20 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xc, 0x7, 0x3, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x29, 0x1, 0xfffff800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}}, 0x890) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r1) r6 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r5, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r7 = epoll_create1(0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) 23:07:20 executing program 0: bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x97, 0xff, 0xb4, 0x9}, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000500ebff050021000020000031000000007656a38086e7a2cf7a098f41c8f7ce2de0aa8d6c8bc52e9a6e5f1e5226fbc1926e"], 0x1c}}, 0x0) 23:07:20 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xc, 0x7, 0x3, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x29, 0x1, 0xfffff800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}}, 0x890) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r1) r6 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r5, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r7 = epoll_create1(0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) socketpair(0xa, 0x6, 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xc, 0x7, 0x3, 0x80000}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x29, 0x1, 0xfffff800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}}, 0x890) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000800), r1) (async) socket(0x18, 0x0, 0x41) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, 0x0, 0x80) (async) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r5, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) (async) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) (async) epoll_create1(0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) (async) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) (async) 23:07:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x488000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x1c}}, 0x42050) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x194, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}]}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x56900}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040000000000000022768d62f63fd14aa8929068eb0000000000050000cd"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20004080) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x14, r8, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) write$vhost_msg_v2(r6, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:20 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000024", @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:07:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fc, 0x0, 0x0, 0x80}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x44282, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fc, 0x0, 0x0, 0x80}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x44282, 0x0) (async) 23:07:20 executing program 0: bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x97, 0xff, 0xb4, 0x9}, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000500ebff050021000020000031000000007656a38086e7a2cf7a098f41c8f7ce2de0aa8d6c8bc52e9a6e5f1e5226fbc1926e"], 0x1c}}, 0x0) 23:07:21 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000080)={r3, 0x2}) r4 = dup(r1) r5 = dup(r4) recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000080)={r3, 0x2}) (async) dup(r1) (async) dup(r4) (async) recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) 23:07:21 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xc, 0x7, 0x3, 0x80000}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x29, 0x1, 0xfffff800) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}}, 0x890) (async) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r1) (async) r6 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r5, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) (async) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) (async) r7 = epoll_create1(0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) 23:07:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0x37, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x0, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2369e780235dc49a64cf03045da946b6448319e5f2adb7f996b212313f68cccb041a6b3fa0a0dd9d177fddeca63e8257fdd69c72c265b1084f9bdcc4da2b6438b638e3e74f822eb33c37af4ddbe835c4b3e0e7844c448b4534395db8023324f5969dd55af08561e1b9fe80be90475366b8fa5f1df7aa74e30a2bc1b599709cd63e2ad9b8c8fb587d4af2e24f3fc108368487a3c569da1bf6f039eb89dcbcdd4dad21d9bc757725999d1da88aece9919f3696a3b4d4a5b4bc63decd955290e4995ca4dc8e665d9f738ea55d94bc034368cd5a6cc9b648f7ec1405351042dcd7a573c53601399a535bc1", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:07:21 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x488000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x1c}}, 0x42050) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x1c}}, 0x42050) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x194, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}]}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x56900}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x194, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}]}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x56900}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040000000000000022768d62f63fd14aa8929068eb0000000000050000cd"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20004080) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x14, r8, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) write$vhost_msg_v2(r6, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fc, 0x0, 0x0, 0x80}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fc, 0x0, 0x0, 0x80}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x44282, 0x0) 23:07:21 executing program 0: bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x97, 0xff, 0xb4, 0x9}, 0x6) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000500ebff050021000020000031000000007656a38086e7a2cf7a098f41c8f7ce2de0aa8d6c8bc52e9a6e5f1e5226fbc1926e"], 0x1c}}, 0x0) 23:07:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0x37, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x0, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2369e780235dc49a64cf03045da946b6448319e5f2adb7f996b212313f68cccb041a6b3fa0a0dd9d177fddeca63e8257fdd69c72c265b1084f9bdcc4da2b6438b638e3e74f822eb33c37af4ddbe835c4b3e0e7844c448b4534395db8023324f5969dd55af08561e1b9fe80be90475366b8fa5f1df7aa74e30a2bc1b599709cd63e2ad9b8c8fb587d4af2e24f3fc108368487a3c569da1bf6f039eb89dcbcdd4dad21d9bc757725999d1da88aece9919f3696a3b4d4a5b4bc63decd955290e4995ca4dc8e665d9f738ea55d94bc034368cd5a6cc9b648f7ec1405351042dcd7a573c53601399a535bc1", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) (rerun: 32) 23:07:21 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x24001, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fe, 0x23, 0x0, 0x80000}) 23:07:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x488000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x1c}}, 0x42050) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x194, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}]}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x56900}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040000000000000022768d62f63fd14aa8929068eb0000000000050000cd"], 0x24}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20004080) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x14, r8, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) write$vhost_msg_v2(r6, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500823e432ef49cd71ed29d63210000000000d86b547bb2c5289bb9733787b869708e28cebe452d4d742ffc0c9743a79cab5ea85035dbcbcd8b325b932bf87bc548e53eb801eedd0383193cb403000000e9dae0dbddc324f75613c57cf94de3320f8f909c44e7e9ddc6c0d104e38efadd321c73c584dd4a8e6bd59f6084db385f6793e206e4f9c0059dd676c91e9ea5a0aaafc33924f9199a203bfd3ae99e7f9b1e613596ef246a6353994bf12794f80f2e191690"], 0x1c}}, 0x0) 23:07:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500823e432ef49cd71ed29d63210000000000d86b547bb2c5289bb9733787b869708e28cebe452d4d742ffc0c9743a79cab5ea85035dbcbcd8b325b932bf87bc548e53eb801eedd0383193cb403000000e9dae0dbddc324f75613c57cf94de3320f8f909c44e7e9ddc6c0d104e38efadd321c73c584dd4a8e6bd59f6084db385f6793e206e4f9c0059dd676c91e9ea5a0aaafc33924f9199a203bfd3ae99e7f9b1e613596ef246a6353994bf12794f80f2e191690"], 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500823e432ef49cd71ed29d63210000000000d86b547bb2c5289bb9733787b869708e28cebe452d4d742ffc0c9743a79cab5ea85035dbcbcd8b325b932bf87bc548e53eb801eedd0383193cb403000000e9dae0dbddc324f75613c57cf94de3320f8f909c44e7e9ddc6c0d104e38efadd321c73c584dd4a8e6bd59f6084db385f6793e206e4f9c0059dd676c91e9ea5a0aaafc33924f9199a203bfd3ae99e7f9b1e613596ef246a6353994bf12794f80f2e191690"], 0x1c}}, 0x0) 23:07:21 executing program 4: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) recvfrom$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r1) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:21 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x24001, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fe, 0x23, 0x0, 0x80000}) 23:07:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0x37, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x0, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2369e780235dc49a64cf03045da946b6448319e5f2adb7f996b212313f68cccb041a6b3fa0a0dd9d177fddeca63e8257fdd69c72c265b1084f9bdcc4da2b6438b638e3e74f822eb33c37af4ddbe835c4b3e0e7844c448b4534395db8023324f5969dd55af08561e1b9fe80be90475366b8fa5f1df7aa74e30a2bc1b599709cd63e2ad9b8c8fb587d4af2e24f3fc108368487a3c569da1bf6f039eb89dcbcdd4dad21d9bc757725999d1da88aece9919f3696a3b4d4a5b4bc63decd955290e4995ca4dc8e665d9f738ea55d94bc034368cd5a6cc9b648f7ec1405351042dcd7a573c53601399a535bc1", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:07:21 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x24001, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fe, 0x23, 0x0, 0x80000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x24001, 0x0) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661fe, 0x23, 0x0, 0x80000}) (async) 23:07:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500823e432ef49cd71ed29d63210000000000d86b547bb2c5289bb9733787b869708e28cebe452d4d742ffc0c9743a79cab5ea85035dbcbcd8b325b932bf87bc548e53eb801eedd0383193cb403000000e9dae0dbddc324f75613c57cf94de3320f8f909c44e7e9ddc6c0d104e38efadd321c73c584dd4a8e6bd59f6084db385f6793e206e4f9c0059dd676c91e9ea5a0aaafc33924f9199a203bfd3ae99e7f9b1e613596ef246a6353994bf12794f80f2e191690"], 0x1c}}, 0x0) 23:07:21 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={0x0, 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000f6060081696c653000"]) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=""/95}) 23:07:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0xffff) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="79aa0eb644405b1449fa1368ec421c4176a4a4d005a06813f86728efe61161f2a7aa916de58256cfe86661ad42452c21bfebb9923db1ce4cc79cd4d2ec6feb03e8316bd26fb96df9f76dac71104cf5662333c8c50c7e99811ce73d1a6f7891bc818f49bc9caca4ece1c6082eff5c43c126111619a3569e8879f2c5304fedef0496ce72824ddb3956d76a61c64be853874d8e9f7c99e48ecead7f5ade5ab9375dd1f870dcc3859d3e6d34c9031b1a3c0f2ecfede68ae0ca353afb7cbb59008f094b0aa005692e75fd", @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x20000010) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 23:07:22 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) (async) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000f6060081696c653000"]) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=""/95}) 23:07:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0xffff) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0xffff) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) 23:07:22 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xff, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022abd7000fedbdf250000000008000c0003000000050022000100000006000e000104000006001b004e20000006000e000700000008001800e000000106001a004e20000008000a00010000000c00100008000000000000000500060001000000"], 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x7, 0x10000, {{0x21, 0x4, 0x0, 0x2, 0x84, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x80}, @local, {[@timestamp_prespec={0x44, 0x2c, 0x5a, 0x3, 0x1, [{@rand_addr=0x64010101, 0x80000001}, {@private=0xa010102, 0x4}, {@broadcast, 0x400}, {@local}, {@local, 0x1}]}, @ssrr={0x89, 0x2b, 0x3d, [@multicast2, @multicast2, @rand_addr=0x64010100, @remote, @local, @remote, @remote, @remote, @multicast2, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x2, [{@multicast1}]}, @ssrr={0x89, 0xb, 0xdc, [@private=0xa010100, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x8798, 0x20, 0x2, 0x4, {{0x6, 0x4, 0x0, 0x32, 0x18, 0x64, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x6, 0x4, {{0x12, 0x4, 0x2, 0x8, 0x48, 0x67, 0x0, 0x1f, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x8, [{@empty, 0x2}, {@remote, 0x3}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18000000}, {@remote, 0x1}, {@multicast1, 0xfffffffb}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f00000006c0)={0x798, 0x0, 0x608, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff729f}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x798}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) 23:07:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="79aa0eb644405b1449fa1368ec421c4176a4a4d005a06813f86728efe61161f2a7aa916de58256cfe86661ad42452c21bfebb9923db1ce4cc79cd4d2ec6feb03e8316bd26fb96df9f76dac71104cf5662333c8c50c7e99811ce73d1a6f7891bc818f49bc9caca4ece1c6082eff5c43c126111619a3569e8879f2c5304fedef0496ce72824ddb3956d76a61c64be853874d8e9f7c99e48ecead7f5ade5ab9375dd1f870dcc3859d3e6d34c9031b1a3c0f2ecfede68ae0ca353afb7cbb59008f094b0aa005692e75fd", @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x20000010) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="79aa0eb644405b1449fa1368ec421c4176a4a4d005a06813f86728efe61161f2a7aa916de58256cfe86661ad42452c21bfebb9923db1ce4cc79cd4d2ec6feb03e8316bd26fb96df9f76dac71104cf5662333c8c50c7e99811ce73d1a6f7891bc818f49bc9caca4ece1c6082eff5c43c126111619a3569e8879f2c5304fedef0496ce72824ddb3956d76a61c64be853874d8e9f7c99e48ecead7f5ade5ab9375dd1f870dcc3859d3e6d34c9031b1a3c0f2ecfede68ae0ca353afb7cbb59008f094b0aa005692e75fd", @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x20000010) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) 23:07:22 executing program 4: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async) recvfrom$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = dup(r1) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:22 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000f6060081696c653000"]) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=""/95}) 23:07:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0xffff) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:22 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xff, 0x800) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022abd7000fedbdf250000000008000c0003000000050022000100000006000e000104000006001b004e20000006000e000700000008001800e000000106001a004e20000008000a00010000000c00100008000000000000000500060001000000"], 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x7, 0x10000, {{0x21, 0x4, 0x0, 0x2, 0x84, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x80}, @local, {[@timestamp_prespec={0x44, 0x2c, 0x5a, 0x3, 0x1, [{@rand_addr=0x64010101, 0x80000001}, {@private=0xa010102, 0x4}, {@broadcast, 0x400}, {@local}, {@local, 0x1}]}, @ssrr={0x89, 0x2b, 0x3d, [@multicast2, @multicast2, @rand_addr=0x64010100, @remote, @local, @remote, @remote, @remote, @multicast2, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x2, [{@multicast1}]}, @ssrr={0x89, 0xb, 0xdc, [@private=0xa010100, @empty]}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x8798, 0x20, 0x2, 0x4, {{0x6, 0x4, 0x0, 0x32, 0x18, 0x64, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x6, 0x4, {{0x12, 0x4, 0x2, 0x8, 0x48, 0x67, 0x0, 0x1f, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x8, [{@empty, 0x2}, {@remote, 0x3}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18000000}, {@remote, 0x1}, {@multicast1, 0xfffffffb}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f00000006c0)={0x798, 0x0, 0x608, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff729f}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x798}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) 23:07:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="79aa0eb644405b1449fa1368ec421c4176a4a4d005a06813f86728efe61161f2a7aa916de58256cfe86661ad42452c21bfebb9923db1ce4cc79cd4d2ec6feb03e8316bd26fb96df9f76dac71104cf5662333c8c50c7e99811ce73d1a6f7891bc818f49bc9caca4ece1c6082eff5c43c126111619a3569e8879f2c5304fedef0496ce72824ddb3956d76a61c64be853874d8e9f7c99e48ecead7f5ade5ab9375dd1f870dcc3859d3e6d34c9031b1a3c0f2ecfede68ae0ca353afb7cbb59008f094b0aa005692e75fd", @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x20000010) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="79aa0eb644405b1449fa1368ec421c4176a4a4d005a06813f86728efe61161f2a7aa916de58256cfe86661ad42452c21bfebb9923db1ce4cc79cd4d2ec6feb03e8316bd26fb96df9f76dac71104cf5662333c8c50c7e99811ce73d1a6f7891bc818f49bc9caca4ece1c6082eff5c43c126111619a3569e8879f2c5304fedef0496ce72824ddb3956d76a61c64be853874d8e9f7c99e48ecead7f5ade5ab9375dd1f870dcc3859d3e6d34c9031b1a3c0f2ecfede68ae0ca353afb7cbb59008f094b0aa005692e75fd", @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x20000010) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) 23:07:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x58, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ef83b6522a6aa107b3d2aa879c000400000000fcdbdf2505000000"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9880}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00042cbd7000fcdbdf250700000005000400080000000500130003000000"], 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x4000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) 23:07:22 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1}) 23:07:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000040)={0x0, 0x43, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x0, 0x9, 0x3}]}, 0x9}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) 23:07:22 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xff, 0x800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022abd7000fedbdf250000000008000c0003000000050022000100000006000e000104000006001b004e20000006000e000700000008001800e000000106001a004e20000008000a00010000000c00100008000000000000000500060001000000"], 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x7, 0x10000, {{0x21, 0x4, 0x0, 0x2, 0x84, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x80}, @local, {[@timestamp_prespec={0x44, 0x2c, 0x5a, 0x3, 0x1, [{@rand_addr=0x64010101, 0x80000001}, {@private=0xa010102, 0x4}, {@broadcast, 0x400}, {@local}, {@local, 0x1}]}, @ssrr={0x89, 0x2b, 0x3d, [@multicast2, @multicast2, @rand_addr=0x64010100, @remote, @local, @remote, @remote, @remote, @multicast2, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x2, [{@multicast1}]}, @ssrr={0x89, 0xb, 0xdc, [@private=0xa010100, @empty]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x8798, 0x20, 0x2, 0x4, {{0x6, 0x4, 0x0, 0x32, 0x18, 0x64, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x6, 0x4, {{0x12, 0x4, 0x2, 0x8, 0x48, 0x67, 0x0, 0x1f, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x8, [{@empty, 0x2}, {@remote, 0x3}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18000000}, {@remote, 0x1}, {@multicast1, 0xfffffffb}]}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f00000006c0)={0x798, 0x0, 0x608, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff729f}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x798}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) 23:07:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x58, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ef83b6522a6aa107b3d2aa879c000400000000fcdbdf2505000000"], 0x14}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9880}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00042cbd7000fcdbdf250700000005000400080000000500130003000000"], 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x4000800) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) 23:07:22 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x0, 0x0}, 0x10) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000040)={0x0, 0x43, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x0, 0x9, 0x3}]}, 0x9}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) 23:07:23 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1}) 23:07:23 executing program 4: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) recvfrom$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r1) (async) r2 = dup(r1) r3 = dup(r2) dup(r3) (async) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:23 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x1b, "be91877af6a5392b36d9f67ad89173ee377629a97d2382226b70a53aa2c8c8cd35ff19ac0006c58d2b65470d78292942dbb0ddf7eeb2eba3a5d523805bd211b3d17f21ed410aa7fa8602ab1ae4e433b183c79cf9e99e1ff943d235eb7eecea5a3129ca7f9edc9a61a8479646997f5ae1f42ce3d0fee30cf1b51750b8a67caa48f40d972ac727143c25b283cd6b93d293d9ee42d6e57f0de2c0139133ed7afd5d7e5726dce6efefb5d22ffd77f17c8a24b71b4d295b81a30cf1a5ab802e044350fb5adbf0b394f391a36b0d51f579da1c0bbfe6bd0bb531fa8368e425b4d52acc3e99685487b22613a0a975ba7e8f06371de136527333d423b109a707ef161ff636776a1265376c2d6699a74153c7ef6d9d571d63a44f6905a37243c10bae1fd8f6ec8c4a62eea426ebf5280b84de116dc4dc14459c11aecc90b86861e4ac870908ec4fe16bce2f575c21b6547fd7afd369416f0c93ccc074e90a655f785f3bd327f9dc34b1bc9dabf80a4a0f94f339793edbc8c7debd39aa7ecd3fbb24ffd2addbdfe99154a4f19b37af12fc7a6dc3c2d6d26ff8324cd2669938dcc87041ec8f83d579d747fa792cfcb893ec0b6550e6e5b65ef03a51c261a622a7acd99f83977908fd30bf355ef71c6b071c9975ee21b0d768d79583d9f193a92f262ea81dc6e40360605321b2a8578b6eca6ca57f4b2765f20123731b4036cd80d5d7d5c9c9"}) 23:07:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000040)={0x0, 0x43, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x0, 0x9, 0x3}]}, 0x9}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) 23:07:23 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x0, 0x0}, 0x10) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x58, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ef83b6522a6aa107b3d2aa879c000400000000fcdbdf2505000000"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9880}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00042cbd7000fcdbdf250700000005000400080000000500130003000000"], 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x4000800) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) 23:07:23 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x1b, "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"}) 23:07:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x400, 0x70bd27, 0x3, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x200}]}, 0x50}, 0x1, 0x0, 0x0, 0x20020000}, 0x88c5) 23:07:23 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x0, 0x0}, 0x10) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:23 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1}) 23:07:23 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x1b, "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"}) 23:07:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\b', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000050014000000000008001900ac1414aa"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, r6, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040010) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8c000084}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000254df3a6118fd7c0ccbce585034a4592ed0312272e4e02d6b3cb4dde2108539ed003a0b8321e4ccae4fcf35b594e45a65241a35c458de61c8804000000f909", @ANYRES16=r2, @ANYBLOB="000229bd7000fbdbdf25030000000c000f00fe2900000000000014001f00fc01000000000000000000000000000106001c000400000014002000fe8000000000000000000000000000aa080009000200000005001400c700000006001d00ff0000000c0010000600000000000000060001000000000006001b004e200000"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4001010) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_udp_int(r7, 0x11, 0x66, &(0x7f0000000400)=0x6, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x814) 23:07:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x400, 0x70bd27, 0x3, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x200}]}, 0x50}, 0x1, 0x0, 0x0, 0x20020000}, 0x88c5) 23:07:24 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_hex={@normal='NumberDcInstances\x00', {0x1}, {&(0x7f0000000000)=@adf_str={@normal='NumberCyInstances\x00', {"faa4ce982faff54ecb1677c7821a88e14b5fceb0d5ace696bdecec3f0d453741466d9770f01115ab5064450c4d65dc711a5d3b646d75e1db659fc5a22d060ffe"}}}}}, {&(0x7f0000000340)={'Accelerator1\x00', {&(0x7f0000000280)=@adf_str={@format={'Dc', '5', 'NumConcurrentSymRequests\x00'}, {"ea17145580ef2b0fa71acf84ac282165a8bf90932a063f981621f2c411403e6da0532c19a71db9d70aa3b35868ff2b99b26fa6a648b70559869a9f92709e886e"}, {&(0x7f00000001c0)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}, {0x6}}}}}}}}}, 0x6}) 23:07:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000c2cbd7002fcdbdf231da218d2191ef5a5c218c5b9a0250000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54261c625cc4816a8960e0d30f730092fc70b21fe7c201e920e6cfb6b24ff85cf06f5"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x488d0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffe}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x94}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x44}}, 0x800) 23:07:24 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:07:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x3dd9eed9d2c74d33, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x64}}, 0x48010) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 23:07:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async, rerun: 64) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\b', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000050014000000000008001900ac1414aa"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, r6, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040010) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8c000084}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000254df3a6118fd7c0ccbce585034a4592ed0312272e4e02d6b3cb4dde2108539ed003a0b8321e4ccae4fcf35b594e45a65241a35c458de61c8804000000f909", @ANYRES16=r2, @ANYBLOB="000229bd7000fbdbdf25030000000c000f00fe2900000000000014001f00fc01000000000000000000000000000106001c000400000014002000fe8000000000000000000000000000aa080009000200000005001400c700000006001d00ff0000000c0010000600000000000000060001000000000006001b004e200000"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4001010) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_udp_int(r7, 0x11, 0x66, &(0x7f0000000400)=0x6, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, 0x0, 0x0) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x814) 23:07:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x400, 0x70bd27, 0x3, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x200}]}, 0x50}, 0x1, 0x0, 0x0, 0x20020000}, 0x88c5) 23:07:24 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) socketpair(0xa, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:07:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000c2cbd7002fcdbdf231da218d2191ef5a5c218c5b9a0250000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54261c625cc4816a8960e0d30f730092fc70b21fe7c201e920e6cfb6b24ff85cf06f5"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x488d0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffe}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x94}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x44}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000c2cbd7002fcdbdf231da218d2191ef5a5c218c5b9a0250000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54261c625cc4816a8960e0d30f730092fc70b21fe7c201e920e6cfb6b24ff85cf06f5"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x488d0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffe}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x94}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x44}}, 0x800) (async) 23:07:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x3dd9eed9d2c74d33, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x64}}, 0x48010) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) (async, rerun: 64) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (rerun: 64) 23:07:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x4000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\b', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000050014000000000008001900ac1414aa"], 0x24}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, r6, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040010) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8c000084}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000254df3a6118fd7c0ccbce585034a4592ed0312272e4e02d6b3cb4dde2108539ed003a0b8321e4ccae4fcf35b594e45a65241a35c458de61c8804000000f909", @ANYRES16=r2, @ANYBLOB="000229bd7000fbdbdf25030000000c000f00fe2900000000000014001f00fc01000000000000000000000000000106001c000400000014002000fe8000000000000000000000000000aa080009000200000005001400c700000006001d00ff0000000c0010000600000000000000060001000000000006001b004e200000"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4001010) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_udp_int(r7, 0x11, 0x66, &(0x7f0000000400)=0x6, 0x4) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x814) 23:07:24 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:07:25 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_hex={@normal='NumberDcInstances\x00', {0x1}, {&(0x7f0000000000)=@adf_str={@normal='NumberCyInstances\x00', {"faa4ce982faff54ecb1677c7821a88e14b5fceb0d5ace696bdecec3f0d453741466d9770f01115ab5064450c4d65dc711a5d3b646d75e1db659fc5a22d060ffe"}}}}}, {&(0x7f0000000340)={'Accelerator1\x00', {&(0x7f0000000280)=@adf_str={@format={'Dc', '5', 'NumConcurrentSymRequests\x00'}, {"ea17145580ef2b0fa71acf84ac282165a8bf90932a063f981621f2c411403e6da0532c19a71db9d70aa3b35868ff2b99b26fa6a648b70559869a9f92709e886e"}, {&(0x7f00000001c0)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}, {0x6}}}}}}}}}, 0x6}) socket$l2tp(0x2, 0x2, 0x73) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) dup(r2) (async) dup(r3) (async) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_hex={@normal='NumberDcInstances\x00', {0x1}, {&(0x7f0000000000)=@adf_str={@normal='NumberCyInstances\x00', {"faa4ce982faff54ecb1677c7821a88e14b5fceb0d5ace696bdecec3f0d453741466d9770f01115ab5064450c4d65dc711a5d3b646d75e1db659fc5a22d060ffe"}}}}}, {&(0x7f0000000340)={'Accelerator1\x00', {&(0x7f0000000280)=@adf_str={@format={'Dc', '5', 'NumConcurrentSymRequests\x00'}, {"ea17145580ef2b0fa71acf84ac282165a8bf90932a063f981621f2c411403e6da0532c19a71db9d70aa3b35868ff2b99b26fa6a648b70559869a9f92709e886e"}, {&(0x7f00000001c0)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}, {0x6}}}}}}}}}, 0x6}) (async) 23:07:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x3dd9eed9d2c74d33, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x64}}, 0x48010) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 23:07:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x4000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000c2cbd7002fcdbdf231da218d2191ef5a5c218c5b9a0250000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54261c625cc4816a8960e0d30f730092fc70b21fe7c201e920e6cfb6b24ff85cf06f5"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x488d0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffe}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x94}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x44}}, 0x800) 23:07:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x5, 0x8, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x64, 0x0, 0xf7, 0x29, 0x0, @private=0xa010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xb1, 0x1, 0xa, [{@rand_addr=0x64010101, 0x3}, {@broadcast, 0x20}, {@loopback, 0x1}]}, @timestamp={0x44, 0x14, 0x85, 0x0, 0x9, [0x4, 0x802, 0x8d, 0x9]}, @timestamp_addr={0x44, 0x14, 0x61, 0x1, 0x3, [{@rand_addr=0x64010100, 0x5}, {@multicast2, 0xed4c}]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="cf97b903", @ANYRES16=r3, @ANYBLOB="000027bd7000fedbdf25000000000800070007bc000008000100", @ANYRES32=r4, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:25 executing program 3: socketpair(0x4, 0x5, 0x930, 0x0) 23:07:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x4000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x5, 0x8, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x64, 0x0, 0xf7, 0x29, 0x0, @private=0xa010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xb1, 0x1, 0xa, [{@rand_addr=0x64010101, 0x3}, {@broadcast, 0x20}, {@loopback, 0x1}]}, @timestamp={0x44, 0x14, 0x85, 0x0, 0x9, [0x4, 0x802, 0x8d, 0x9]}, @timestamp_addr={0x44, 0x14, 0x61, 0x1, 0x3, [{@rand_addr=0x64010100, 0x5}, {@multicast2, 0xed4c}]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="cf97b903", @ANYRES16=r3, @ANYBLOB="000027bd7000fedbdf25000000000800070007bc000008000100", @ANYRES32=r4, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:25 executing program 1: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="736974f9000000000000000000389100", @ANYRES32=0x0, @ANYBLOB="000700400000c8767fffffff4e27007800660000072f9078ffffffffac1414bb830b5eac1e0001ac1414aa44148ca1e000000200000006ac1414aa0000000944444321e0000002000000027f00000100000013ac1414aa00000b42ac1414aafffffffee0000002000003607f00000100000003e00000010000001ce00000010000000000"]}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x180}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x9, 0x2, {{0xe, 0x4, 0x0, 0x7, 0x38, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x21, 0x0, [{0x0, 0x2}, {0x2, 0xa, "c27a5186bfe50891"}, {0x5, 0xf, "97c2a067572c09004b4c65f333"}]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x94c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc2a1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc080}, 0x8080) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="23d472069100f1df19000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000d2d6f1dd4aaf8000000000000000005"], 0x1c}}, 0x0) 23:07:25 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x48) r1 = dup(r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bind$isdn(r1, &(0x7f0000000000)={0x22, 0x1, 0x80, 0x0, 0x1}, 0x6) 23:07:25 executing program 3: socketpair(0x4, 0x5, 0x930, 0x0) 23:07:25 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = dup(r0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_hex={@normal='NumberDcInstances\x00', {0x1}, {&(0x7f0000000000)=@adf_str={@normal='NumberCyInstances\x00', {"faa4ce982faff54ecb1677c7821a88e14b5fceb0d5ace696bdecec3f0d453741466d9770f01115ab5064450c4d65dc711a5d3b646d75e1db659fc5a22d060ffe"}}}}}, {&(0x7f0000000340)={'Accelerator1\x00', {&(0x7f0000000280)=@adf_str={@format={'Dc', '5', 'NumConcurrentSymRequests\x00'}, {"ea17145580ef2b0fa71acf84ac282165a8bf90932a063f981621f2c411403e6da0532c19a71db9d70aa3b35868ff2b99b26fa6a648b70559869a9f92709e886e"}, {&(0x7f00000001c0)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}, {0x6}}}}}}}}}, 0x6}) 23:07:25 executing program 1: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="736974f9000000000000000000389100", @ANYRES32=0x0, @ANYBLOB="000700400000c8767fffffff4e27007800660000072f9078ffffffffac1414bb830b5eac1e0001ac1414aa44148ca1e000000200000006ac1414aa0000000944444321e0000002000000027f00000100000013ac1414aa00000b42ac1414aafffffffee0000002000003607f00000100000003e00000010000001ce00000010000000000"]}) (async, rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x180}, 0x4040000) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x9, 0x2, {{0xe, 0x4, 0x0, 0x7, 0x38, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x21, 0x0, [{0x0, 0x2}, {0x2, 0xa, "c27a5186bfe50891"}, {0x5, 0xf, "97c2a067572c09004b4c65f333"}]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x94c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc2a1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc080}, 0x8080) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x5, 0x8, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x64, 0x0, 0xf7, 0x29, 0x0, @private=0xa010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xb1, 0x1, 0xa, [{@rand_addr=0x64010101, 0x3}, {@broadcast, 0x20}, {@loopback, 0x1}]}, @timestamp={0x44, 0x14, 0x85, 0x0, 0x9, [0x4, 0x802, 0x8d, 0x9]}, @timestamp_addr={0x44, 0x14, 0x61, 0x1, 0x3, [{@rand_addr=0x64010100, 0x5}, {@multicast2, 0xed4c}]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="cf97b903", @ANYRES16=r3, @ANYBLOB="000027bd7000fedbdf25000000000800070007bc000008000100", @ANYRES32=r4, @ANYBLOB="bc0108804c0000801400040002004e2464010102000000000000000006000500f9ff0000060005000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff900000801400040002004e23ac1e0101000000000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000100000008000a0001000000200004000a004e200000000020010000000000000000000000000001debd1504d00000801400040002004e216401010100000000000000000600050009000000060005000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223800098034000080060001000200000008000200ac1414400500030001000000060001000200000008000200000000000500030001000000200004000a004e2400000000fe8000000000000000000000000000150100000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0c00008008000a000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843060006004e240000"], 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) [ 1316.573430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:07:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="23d472069100f1df19000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000d2d6f1dd4aaf8000000000000000005"], 0x1c}}, 0x0) 23:07:26 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x48) (async, rerun: 32) r1 = dup(r0) (rerun: 32) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async, rerun: 32) bind$isdn(r1, &(0x7f0000000000)={0x22, 0x1, 0x80, 0x0, 0x1}, 0x6) (rerun: 32) 23:07:26 executing program 1: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="736974f9000000000000000000389100", @ANYRES32=0x0, @ANYBLOB="000700400000c8767fffffff4e27007800660000072f9078ffffffffac1414bb830b5eac1e0001ac1414aa44148ca1e000000200000006ac1414aa0000000944444321e0000002000000027f00000100000013ac1414aa00000b42ac1414aafffffffee0000002000003607f00000100000003e00000010000001ce00000010000000000"]}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x180}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x9, 0x2, {{0xe, 0x4, 0x0, 0x7, 0x38, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x21, 0x0, [{0x0, 0x2}, {0x2, 0xa, "c27a5186bfe50891"}, {0x5, 0xf, "97c2a067572c09004b4c65f333"}]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x94c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc2a1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc080}, 0x8080) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="736974f9000000000000000000389100", @ANYRES32=0x0, @ANYBLOB="000700400000c8767fffffff4e27007800660000072f9078ffffffffac1414bb830b5eac1e0001ac1414aa44148ca1e000000200000006ac1414aa0000000944444321e0000002000000027f00000100000013ac1414aa00000b42ac1414aafffffffee0000002000003607f00000100000003e00000010000001ce00000010000000000"]}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x180}, 0x4040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x9, 0x2, {{0xe, 0x4, 0x0, 0x7, 0x38, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x21, 0x0, [{0x0, 0x2}, {0x2, 0xa, "c27a5186bfe50891"}, {0x5, 0xf, "97c2a067572c09004b4c65f333"}]}]}}}}}) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x94c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc2a1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc080}, 0x8080) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) 23:07:26 executing program 3: socketpair(0x4, 0x5, 0x930, 0x0) socketpair(0x4, 0x5, 0x930, 0x0) (async) 23:07:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r1, @ANYRESHEX=r1], 0x1c}}, 0x50) 23:07:26 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x48) dup(r0) (async) r1 = dup(r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bind$isdn(r1, &(0x7f0000000000)={0x22, 0x1, 0x80, 0x0, 0x1}, 0x6) 23:07:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x101900, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xc, 0x6, 0x48dd, 0x80000}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r1, @ANYRESHEX=r1], 0x1c}}, 0x50) 23:07:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x100, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$FIONCLEX(r1, 0x5450) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2000}) socketpair(0x27, 0xa, 0x2, 0x0) 23:07:26 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x4002040, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, 0xfffffffc}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000050000008d65ca71d9c25283cdf79d0500140000"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000854}, 0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r11) r13 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r13, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r13, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r12, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r12, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040005}, 0x20000095) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x24000000) 23:07:26 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)) 23:07:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x101900, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xc, 0x6, 0x48dd, 0x80000}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r1, @ANYRESHEX=r1], 0x1c}}, 0x50) 23:07:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x100, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$FIONCLEX(r1, 0x5450) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2000}) socketpair(0x27, 0xa, 0x2, 0x0) 23:07:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="23d472069100f1df19000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000d2d6f1dd4aaf8000000000000000005"], 0x1c}}, 0x0) 23:07:26 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) (async) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)) (async) 23:07:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}}, 0x4000) [ 1317.589067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:07:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x101900, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xc, 0x6, 0x48dd, 0x80000}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x100, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$FIONCLEX(r1, 0x5450) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2000}) socketpair(0x27, 0xa, 0x2, 0x0) 23:07:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00000000008a578237121bbc432d9436d400000000"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x880) 23:07:27 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) (async) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)) (async) [ 1317.726303] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:27 executing program 1: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x1) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000100)={0x6, "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"}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 23:07:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}}, 0x4000) 23:07:27 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="859a99ef886da59b6e01e200621da14f70b0d7a90c7fde08b8"]) bind$isdn(r0, &(0x7f0000000080)={0x22, 0x6, 0x6, 0x1, 0x8}, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 23:07:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00000000008a578237121bbc432d9436d400000000"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00000000008a578237121bbc432d9436d400000000"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x880) (async) 23:07:27 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x4002040, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, 0xfffffffc}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000050000008d65ca71d9c25283cdf79d0500140000"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000854}, 0x800) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r11) (async) r13 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r13, 0x0, 0x80) (async) sendmsg$SMC_PNETID_DEL(r13, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r12, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) (async) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r12, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040005}, 0x20000095) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x24000000) 23:07:27 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0xaf9, 0x101000) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0xfffffffffffffd5e, 0x0, 0x3}}, 0x48) 23:07:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}}, 0x4000) (async) 23:07:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00000000008a578237121bbc432d9436d400000000"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x880) 23:07:27 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0xaf9, 0x101000) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0xfffffffffffffd5e, 0x0, 0x3}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0xfffffffffffffd5e, 0x0, 0x3}}, 0x48) 23:07:27 executing program 1: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x1) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000100)={0x6, "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"}) (async) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 23:07:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000ffff040021000000009a9ac1a725c3c94fe07458345300000000000000000000455b9fbef043001ab7cd663b0d1fdbbe5a0c05f1fb9a16cd33a2fc9575afd7846d00e0c3f8484d5d0cdceed1e9c737a05837d4d804c244f9380fb5f3b4b7254ba23e27f88ab0269b23d5585eb8f39c943e59033e66fc3c68"], 0x1c}}, 0x60000c5) 23:07:27 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="859a99ef886da59b6e01e200621da14f70b0d7a90c7fde08b8"]) bind$isdn(r0, &(0x7f0000000080)={0x22, 0x6, 0x6, 0x1, 0x8}, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) socketpair(0xa, 0x6, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYBLOB="859a99ef886da59b6e01e200621da14f70b0d7a90c7fde08b8"]) (async) bind$isdn(r0, &(0x7f0000000080)={0x22, 0x6, 0x6, 0x1, 0x8}, 0x6) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async) 23:07:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) clock_getres(0x1, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:28 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0xaf9, 0x101000) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0xfffffffffffffd5e, 0x0, 0x3}}, 0x48) 23:07:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000ffff040021000000009a9ac1a725c3c94fe07458345300000000000000000000455b9fbef043001ab7cd663b0d1fdbbe5a0c05f1fb9a16cd33a2fc9575afd7846d00e0c3f8484d5d0cdceed1e9c737a05837d4d804c244f9380fb5f3b4b7254ba23e27f88ab0269b23d5585eb8f39c943e59033e66fc3c68"], 0x1c}}, 0x60000c5) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000ffff040021000000009a9ac1a725c3c94fe07458345300000000000000000000455b9fbef043001ab7cd663b0d1fdbbe5a0c05f1fb9a16cd33a2fc9575afd7846d00e0c3f8484d5d0cdceed1e9c737a05837d4d804c244f9380fb5f3b4b7254ba23e27f88ab0269b23d5585eb8f39c943e59033e66fc3c68"], 0x1c}}, 0x60000c5) (async) 23:07:28 executing program 1: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x1) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000100)={0x6, "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"}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x1) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000100)={0x6, "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"}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 23:07:28 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = dup(r0) (rerun: 32) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendto$l2tp(r0, 0x0, 0x0, 0x4002040, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, 0xfffffffc}, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000050000008d65ca71d9c25283cdf79d0500140000"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000854}, 0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r11) (async) r13 = socket(0x18, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r13, 0x0, 0x80) (async, rerun: 32) sendmsg$SMC_PNETID_DEL(r13, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r12, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) (rerun: 32) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r12, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040005}, 0x20000095) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x24000000) 23:07:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) clock_getres(0x1, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:28 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xffffffff, 0x0, 0x80000, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x4) 23:07:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000ffff040021000000009a9ac1a725c3c94fe07458345300000000000000000000455b9fbef043001ab7cd663b0d1fdbbe5a0c05f1fb9a16cd33a2fc9575afd7846d00e0c3f8484d5d0cdceed1e9c737a05837d4d804c244f9380fb5f3b4b7254ba23e27f88ab0269b23d5585eb8f39c943e59033e66fc3c68"], 0x1c}}, 0x60000c5) 23:07:28 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="859a99ef886da59b6e01e200621da14f70b0d7a90c7fde08b8"]) bind$isdn(r0, &(0x7f0000000080)={0x22, 0x6, 0x6, 0x1, 0x8}, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 23:07:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x0, 0x3, 0x10}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000209373f157da5e1fe0c3ef83f996fef524c502b4c62118285669e9cec1672860c35a8174b6aa15a9dcafac9a92e9bb0200f4dc8d0df12e889720b2416cbab56f51f66f7cbc574992aaa27c03596c7e7cdf07b6c8ab0c1a0cc19533d85b2d2407d36d26d62c56249a379e4a98f0d82a7a5851ae1b494b", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf25030000000a000900aaaaaaaaaa2c000005002f0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000080) 23:07:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) clock_getres(0x1, &(0x7f0000000000)) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:28 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) 23:07:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xffffffff, 0x0, 0x80000, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xffffffff, 0x0, 0x80000}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) (async) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x4) (async) 23:07:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x8cef, 0x86281) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000140)=0x4c8, 0xffffffffffffff00) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000300)=0x9, 0x4) socketpair(0xa, 0x6, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 23:07:28 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={0x0, 0x1}) r2 = dup(r0) dup(r2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x103204, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = dup(r4) recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$l2tp(r2, &(0x7f00000012c0)=""/4096, 0x1000, 0x2000, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=""/30, &(0x7f0000000240)=0x1e) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc045}, 0x495) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000480)=""/48, &(0x7f00000004c0)=0x30) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000ffdbdf2507000000ff000600fe0000000800110000000000060001000700000006001a004e2200000c0010000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x48091) 23:07:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x0, 0x3, 0x10}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000209373f157da5e1fe0c3ef83f996fef524c502b4c62118285669e9cec1672860c35a8174b6aa15a9dcafac9a92e9bb0200f4dc8d0df12e889720b2416cbab56f51f66f7cbc574992aaa27c03596c7e7cdf07b6c8ab0c1a0cc19533d85b2d2407d36d26d62c56249a379e4a98f0d82a7a5851ae1b494b", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf25030000000a000900aaaaaaaaaa2c000005002f0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000080) 23:07:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0xffffffff, 0x0, 0x80000, 0xffffffffffffffff}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x4) 23:07:29 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x8cef, 0x86281) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000140)=0x4c8, 0xffffffffffffff00) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000300)=0x9, 0x4) socketpair(0xa, 0x6, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 23:07:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x0, 0x3, 0x10}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000209373f157da5e1fe0c3ef83f996fef524c502b4c62118285669e9cec1672860c35a8174b6aa15a9dcafac9a92e9bb0200f4dc8d0df12e889720b2416cbab56f51f66f7cbc574992aaa27c03596c7e7cdf07b6c8ab0c1a0cc19533d85b2d2407d36d26d62c56249a379e4a98f0d82a7a5851ae1b494b", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf25030000000a000900aaaaaaaaaa2c000005002f0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000080) 23:07:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=""/30, &(0x7f0000000240)=0x1e) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc045}, 0x495) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5) (async) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000480)=""/48, &(0x7f00000004c0)=0x30) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000ffdbdf2507000000ff000600fe0000000800110000000000060001000700000006001a004e2200000c0010000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x48091) 23:07:29 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) 23:07:29 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x30}}, 0x4000041) 23:07:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x8cef, 0x86281) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000140)=0x4c8, 0xffffffffffffff00) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000300)=0x9, 0x4) socketpair(0xa, 0x6, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) syz_open_dev$mouse(&(0x7f0000000340), 0x8cef, 0x86281) (async) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000140)=0x4c8, 0xffffffffffffff00) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000300)=0x9, 0x4) (async) socketpair(0xa, 0x6, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x0) (async) 23:07:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=""/30, &(0x7f0000000240)=0x1e) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc045}, 0x495) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000480)=""/48, &(0x7f00000004c0)=0x30) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000ffdbdf2507000000ff000600fe0000000800110000000000060001000700000006001a004e2200000c0010000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x48091) 23:07:29 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={0x0, 0x1}) r2 = dup(r0) dup(r2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x103204, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) dup(r4) (async) r5 = dup(r4) recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$l2tp(r2, &(0x7f00000012c0)=""/4096, 0x1000, 0x2000, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:29 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r0, 0x1, 0x0, 0x25dfdbfd}, 0x14}}, 0x11) 23:07:29 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) 23:07:29 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x30}}, 0x4000041) 23:07:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002d7dfc0000000000000000000000000000000000000004000000000000000000ee4c360e4a3dae7dbe929d0f12965aab76fad865110f8542d243208c8aa5d1b97ceb9baf7a2d01"], 0x28}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:29 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x48880) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x2c, 0x29, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0x0, 0x3}, {0xffff, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3f, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4048804) socketpair(0xa, 0x6, 0x0, 0x0) 23:07:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002d7dfc0000000000000000000000000000000000000004000000000000000000ee4c360e4a3dae7dbe929d0f12965aab76fad865110f8542d243208c8aa5d1b97ceb9baf7a2d01"], 0x28}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:29 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r0, 0x1, 0x0, 0x25dfdbfd}, 0x14}}, 0x11) 23:07:29 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x48880) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x2c, 0x29, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0x0, 0x3}, {0xffff, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3f, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4048804) socketpair(0xa, 0x6, 0x0, 0x0) (async) socketpair(0xa, 0x6, 0x0, 0x0) 23:07:29 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) (async) bind$bt_sco(r1, &(0x7f0000000000), 0x8) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 23:07:29 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x30}}, 0x4000041) 23:07:30 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002d7dfc0000000000000000000000000000000000000004000000000000000000ee4c360e4a3dae7dbe929d0f12965aab76fad865110f8542d243208c8aa5d1b97ceb9baf7a2d01"], 0x28}}, 0x20000000) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002d7dfc0000000000000000000000000000000000000004000000000000000000ee4c360e4a3dae7dbe929d0f12965aab76fad865110f8542d243208c8aa5d1b97ceb9baf7a2d01"], 0x28}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:30 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={0x0, 0x1}) r2 = dup(r0) dup(r2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x103204, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = dup(r4) recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$l2tp(r2, &(0x7f00000012c0)=""/4096, 0x1000, 0x2000, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={0x0, 0x1}) (async) dup(r0) (async) dup(r2) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x103204, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) dup(r4) (async) recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$l2tp(r2, &(0x7f00000012c0)=""/4096, 0x1000, 0x2000, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) 23:07:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r0, 0x1, 0x0, 0x25dfdbfd}, 0x14}}, 0x11) 23:07:30 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x48880) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x2c, 0x29, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0x0, 0x3}, {0xffff, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3f, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4048804) (async) socketpair(0xa, 0x6, 0x0, 0x0) 23:07:30 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$vhost_msg_v2(r3, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000440)=""/166, 0xa6, &(0x7f0000000500)=""/111, 0x1, 0x3}}, 0x48) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4005) r4 = syz_open_dev$vcsa(&(0x7f0000000600), 0x8, 0x400000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r5) r7 = socket(0x2c, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x80) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x89) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r8, 0x651cff18045edba6, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x890) 23:07:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3ff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x20040000) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe0c}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 23:07:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xff, 0x2, 0x6, 0x1000, 0xffffffffffffffff, 0x80000000, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1fc, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 23:07:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xff, 0x2, 0x6, 0x1000, 0xffffffffffffffff, 0x80000000, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1fc, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xff, 0x2, 0x6, 0x1000, 0xffffffffffffffff, 0x80000000, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000640)}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1fc, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) 23:07:30 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 23:07:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3ff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x20040000) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe0c}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 23:07:30 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$vhost_msg_v2(r3, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000440)=""/166, 0xa6, &(0x7f0000000500)=""/111, 0x1, 0x3}}, 0x48) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4005) r4 = syz_open_dev$vcsa(&(0x7f0000000600), 0x8, 0x400000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r5) r7 = socket(0x2c, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x80) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x89) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r8, 0x651cff18045edba6, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x890) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) write$vhost_msg_v2(r3, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000440)=""/166, 0xa6, &(0x7f0000000500)=""/111, 0x1, 0x3}}, 0x48) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4005) (async) syz_open_dev$vcsa(&(0x7f0000000600), 0x8, 0x400000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000800), r5) (async) socket(0x2c, 0x0, 0x41) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, 0x0, 0x80) (async) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) (async) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x80) (async) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x89) (async) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x5) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r8, 0x651cff18045edba6, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x890) (async) 23:07:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c040000ada7a8e287b3e5173a7ece26aafefbabe7010ee627c9520e2bc4d730110a0659cfe6c422dc9208d59573bd36a8ace91e9c9151fa6245b912365affaf05aff611fca598462bd393f15e0f17c05df0f18bf93aab382bf0d00eb2", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:07:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xff, 0x2, 0x6, 0x1000, 0xffffffffffffffff, 0x80000000, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1fc, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 23:07:31 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) recvfrom$l2tp(r1, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x0, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:31 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async, rerun: 64) r0 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (rerun: 32) 23:07:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3ff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x20040000) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe0c}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 23:07:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c040000ada7a8e287b3e5173a7ece26aafefbabe7010ee627c9520e2bc4d730110a0659cfe6c422dc9208d59573bd36a8ace91e9c9151fa6245b912365affaf05aff611fca598462bd393f15e0f17c05df0f18bf93aab382bf0d00eb2", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:07:31 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$vhost_msg_v2(r3, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000440)=""/166, 0xa6, &(0x7f0000000500)=""/111, 0x1, 0x3}}, 0x48) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4005) r4 = syz_open_dev$vcsa(&(0x7f0000000600), 0x8, 0x400000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r5) r7 = socket(0x2c, 0x0, 0x41) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, 0x0, 0x80) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x80) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x89) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r8, 0x651cff18045edba6, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x890) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) write$vhost_msg_v2(r3, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000440)=""/166, 0xa6, &(0x7f0000000500)=""/111, 0x1, 0x3}}, 0x48) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4005) (async) syz_open_dev$vcsa(&(0x7f0000000600), 0x8, 0x400000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000800), r5) (async) socket(0x2c, 0x0, 0x41) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, 0x0, 0x80) (async) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x1) (async) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x80) (async) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x89) (async) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x5) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r8, 0x651cff18045edba6, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x890) (async) 23:07:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 23:07:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 23:07:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 23:07:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c040000ada7a8e287b3e5173a7ece26aafefbabe7010ee627c9520e2bc4d730110a0659cfe6c422dc9208d59573bd36a8ace91e9c9151fa6245b912365affaf05aff611fca598462bd393f15e0f17c05df0f18bf93aab382bf0d00eb2", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c040000ada7a8e287b3e5173a7ece26aafefbabe7010ee627c9520e2bc4d730110a0659cfe6c422dc9208d59573bd36a8ace91e9c9151fa6245b912365affaf05aff611fca598462bd393f15e0f17c05df0f18bf93aab382bf0d00eb2", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) (async) 23:07:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) 23:07:31 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$FIONCLEX(r1, 0x5450) 23:07:31 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) socketpair(0xa, 0x6, 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async) 23:07:32 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) recvfrom$l2tp(r1, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x0, 0x0) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 23:07:32 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) ioctl$FIONCLEX(r1, 0x5450) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$FIONCLEX(r1, 0x5450) (async) 23:07:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040011}, 0x2000c000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x84}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xe8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x30004000}, 0x8814) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:32 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4114) 23:07:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 23:07:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socketpair(0x8, 0x1, 0x20a5bf6e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x401}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x4c}}, 0x44854) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={@broadcast, 0x1, 0x0, 0x50, 0x0, [{@broadcast}, {@dev}, {}, {@remote}, {@multicast1}]}}) syz_open_dev$vcsa(&(0x7f0000000180), 0xf0, 0x2000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c003b79d105c562f105a5d47e5300", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:07:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040011}, 0x2000c000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x84}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xe8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x30004000}, 0x8814) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) (async) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040011}, 0x2000c000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x84}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xe8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x30004000}, 0x8814) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 23:07:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socketpair(0x8, 0x1, 0x20a5bf6e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x401}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x4c}}, 0x44854) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={@broadcast, 0x1, 0x0, 0x50, 0x0, [{@broadcast}, {@dev}, {}, {@remote}, {@multicast1}]}}) (async) syz_open_dev$vcsa(&(0x7f0000000180), 0xf0, 0x2000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c003b79d105c562f105a5d47e5300", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:07:32 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4114) socketpair(0xa, 0x6, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4114) (async) 23:07:32 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) ioctl$FIONCLEX(r1, 0x5450) 23:07:32 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) recvfrom$l2tp(r1, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x0, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = dup(r2) r4 = dup(r3) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf250a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040011}, 0x2000c000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x84}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xe8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x30004000}, 0x8814) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:32 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x40, 0x8600) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x3, r2}) 23:07:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) 23:07:32 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4114) 23:07:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) socketpair(0x8, 0x1, 0x20a5bf6e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x401}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x4c}}, 0x44854) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={@broadcast, 0x1, 0x0, 0x50, 0x0, [{@broadcast}, {@dev}, {}, {@remote}, {@multicast1}]}}) (async, rerun: 32) syz_open_dev$vcsa(&(0x7f0000000180), 0xf0, 0x2000) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c003b79d105c562f105a5d47e5300", @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000500210000000000"], 0x1c}}, 0x0) 23:07:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 23:07:33 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x40, 0x8600) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x3, r2}) 23:07:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x400c0) 23:07:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="7f000001010000003000000000000000000000000000000000e00000010000009f4a70bfe43a77f08e0bd8af181f000000000000170000ac1414bb0100"/78]}) write$tcp_congestion(r1, &(0x7f00000000c0)='westwood\x00', 0x9) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:33 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 23:07:33 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x40, 0x8600) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x3, r2}) 23:07:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0xfffffffffffffc01, 0x50001) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) 23:07:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x400c0) 23:07:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x5c}}, 0x20000000) socketpair(0x3, 0x3, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3a}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x26}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) 23:07:33 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socketpair(0xa, 0x6, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) 23:07:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="7f000001010000003000000000000000000000000000000000e00000010000009f4a70bfe43a77f08e0bd8af181f000000000000170000ac1414bb0100"/78]}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="7f000001010000003000000000000000000000000000000000e00000010000009f4a70bfe43a77f08e0bd8af181f000000000000170000ac1414bb0100"/78]}) write$tcp_congestion(r1, &(0x7f00000000c0)='westwood\x00', 0x9) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:33 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1d, 0x80000, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r6) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) connect$l2tp(r7, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x814}, 0x40004) 23:07:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x5c}}, 0x20000000) socketpair(0x3, 0x3, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3a}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x26}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3a}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x26}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) 23:07:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0xfffffffffffffc01, 0x50001) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) 23:07:33 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="7f000001010000003000000000000000000000000000000000e00000010000009f4a70bfe43a77f08e0bd8af181f000000000000170000ac1414bb0100"/78]}) write$tcp_congestion(r1, &(0x7f00000000c0)='westwood\x00', 0x9) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:33 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 23:07:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x400c0) 23:07:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x5c}}, 0x20000000) socketpair(0x3, 0x3, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3a}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x26}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x5c}}, 0x20000000) (async) socketpair(0x3, 0x3, 0x2, &(0x7f00000003c0)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3a}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x26}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) (async) 23:07:34 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000054) 23:07:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x2, 0x7, 0xc1, 0x9, 0x7, 0x5, 0x7f, 0x3f, 0x3, 0xff, 0xf4, "e81186909fbe9c5b75b78de1a61696262386981d72f74874cad5bb6e9498d859"}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0xfffffffffffffc01, 0x50001) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000040), 0xfffffffffffffc01, 0x50001) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) (async) 23:07:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x33, 0xa, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:34 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000280), 0x2, 0x103000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x21, 0x1, 0x7f, &(0x7f00000003c0)) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000100)=""/184, 0xb8, &(0x7f0000000000)=""/28, 0x1, 0x3}}, 0x48) ioctl$FIONCLEX(r2, 0x5450) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000380)="b9d9c16e668b7fc20e0bc015e2465903fcaea45238baa0ea49b14fe4fcb32e66e4389d86762ed1c1") 23:07:34 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair(0x1d, 0x80000, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r6) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) connect$l2tp(r7, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x814}, 0x40004) (rerun: 32) 23:07:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x2, 0x7, 0xc1, 0x9, 0x7, 0x5, 0x7f, 0x3f, 0x3, 0xff, 0xf4, "e81186909fbe9c5b75b78de1a61696262386981d72f74874cad5bb6e9498d859"}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:34 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000054) socketpair(0xa, 0x6, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000054) (async) 23:07:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x33, 0xa, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x33, 0xa, 0x9, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:34 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000280), 0x2, 0x103000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x21, 0x1, 0x7f, &(0x7f00000003c0)) (async) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000100)=""/184, 0xb8, &(0x7f0000000000)=""/28, 0x1, 0x3}}, 0x48) (async, rerun: 32) ioctl$FIONCLEX(r2, 0x5450) (async, rerun: 32) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000380)="b9d9c16e668b7fc20e0bc015e2465903fcaea45238baa0ea49b14fe4fcb32e66e4389d86762ed1c1") 23:07:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = dup(r0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x2}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x8, 0x4) 23:07:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x2, 0x7, 0xc1, 0x9, 0x7, 0x5, 0x7f, 0x3f, 0x3, 0xff, 0xf4, "e81186909fbe9c5b75b78de1a61696262386981d72f74874cad5bb6e9498d859"}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:34 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000054) socketpair(0xa, 0x6, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000054) (async) 23:07:34 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000280), 0x2, 0x103000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x21, 0x1, 0x7f, &(0x7f00000003c0)) (async) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) write$vhost_msg_v2(r2, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000100)=""/184, 0xb8, &(0x7f0000000000)=""/28, 0x1, 0x3}}, 0x48) ioctl$FIONCLEX(r2, 0x5450) (async) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000380)="b9d9c16e668b7fc20e0bc015e2465903fcaea45238baa0ea49b14fe4fcb32e66e4389d86762ed1c1") 23:07:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = dup(r0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x2}, 0x14}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x8, 0x4) 23:07:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair(0x33, 0xa, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:34 executing program 1: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10001) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:35 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = dup(r0) (rerun: 32) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socketpair(0x1d, 0x80000, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r6) (async, rerun: 32) r7 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) (async) connect$l2tp(r7, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x814}, 0x40004) 23:07:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = dup(r0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x2}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x8, 0x4) 23:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:35 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x4000) 23:07:35 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0x48) 23:07:35 executing program 1: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10001) (async, rerun: 32) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:35 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) socketpair(0xa, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x4000) 23:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4810) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) (async) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:35 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:35 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0x48) 23:07:35 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x4000) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x4000) 23:07:35 executing program 1: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10001) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:35 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x1, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:35 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0x48) 23:07:35 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:35 executing program 3: ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x8001) socketpair(0xa, 0x6, 0x0, 0x0) 23:07:35 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd6300fcdbdf250a00000008002c00ffffffff0500300000000000"], 0x24}}, 0x40000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:36 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:36 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd6300fcdbdf250a00000008002c00ffffffff0500300000000000"], 0x24}}, 0x40000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:36 executing program 3: ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x8001) (async) socketpair(0xa, 0x6, 0x0, 0x0) 23:07:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x1, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) dup(r1) (async) dup(r2) (async) recvfrom$l2tp(r3, 0x0, 0x0, 0x1, 0x0, 0x0) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) 23:07:36 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:36 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd6300fcdbdf250a00000008002c00ffffffff0500300000000000"], 0x24}}, 0x40000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:36 executing program 3: ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x8001) socketpair(0xa, 0x6, 0x0, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x8001) (async) socketpair(0xa, 0x6, 0x0, 0x0) (async) 23:07:36 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x3, 0x4, {{0x3e, 0x4, 0x2, 0x3, 0xf8, 0x66, 0x0, 0x7f, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0xa9, 0x0, 0x8, [0x8, 0x6, 0x40]}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4c, 0x86, 0x1, 0x4, [{@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4020}, {@multicast2, 0x6}, {@local, 0x4}, {@multicast2, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff800}, {@rand_addr=0x64010100, 0x80}, {@rand_addr=0x64010100, 0x19}, {@rand_addr=0x64010100, 0xa606}]}, @cipso={0x86, 0x78, 0x2, [{0x5, 0x2}, {0x7, 0x12, "9f785a8a8bfc8c025df77f773fe58f01"}, {0x1, 0xe, "1d8b406c0fc3fc8a165fd20a"}, {0x2, 0xb, "1ebb2ccfd52b717d16"}, {0x2, 0xe, "4ddb110f424c0778b25f79a2"}, {0x6, 0xd, "a3e0d3d03ddadcd0cbcfab"}, {0x5, 0x12, "82e19a794407d53a7b8e848014a06c54"}, {0x2, 0x9, "1d8b885ced154d"}, {0x6, 0x8, "37cd8e08ead6"}, {0x1, 0x7, "73367f2a8e"}]}, @ra={0x94, 0x4}]}}}}}) 23:07:36 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) (async) 23:07:36 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 23:07:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:36 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 23:07:36 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x3, 0x4, {{0x3e, 0x4, 0x2, 0x3, 0xf8, 0x66, 0x0, 0x7f, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0xa9, 0x0, 0x8, [0x8, 0x6, 0x40]}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4c, 0x86, 0x1, 0x4, [{@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4020}, {@multicast2, 0x6}, {@local, 0x4}, {@multicast2, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff800}, {@rand_addr=0x64010100, 0x80}, {@rand_addr=0x64010100, 0x19}, {@rand_addr=0x64010100, 0xa606}]}, @cipso={0x86, 0x78, 0x2, [{0x5, 0x2}, {0x7, 0x12, "9f785a8a8bfc8c025df77f773fe58f01"}, {0x1, 0xe, "1d8b406c0fc3fc8a165fd20a"}, {0x2, 0xb, "1ebb2ccfd52b717d16"}, {0x2, 0xe, "4ddb110f424c0778b25f79a2"}, {0x6, 0xd, "a3e0d3d03ddadcd0cbcfab"}, {0x5, 0x12, "82e19a794407d53a7b8e848014a06c54"}, {0x2, 0x9, "1d8b885ced154d"}, {0x6, 0x8, "37cd8e08ead6"}, {0x1, 0x7, "73367f2a8e"}]}, @ra={0x94, 0x4}]}}}}}) 23:07:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = dup(r0) r2 = dup(r1) r3 = dup(r2) recvfrom$l2tp(r3, 0x0, 0x0, 0x1, 0x0, 0x0) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:36 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="da1310d2b87ab4b8178506503af0d463e23f25f814be861282b754679e91804c7835ac5119202ca7bfacc2c32c4832745970955cb1aa70226254d4bba61951dda3deb8ab6579b992d8a2bcd3818d657253d9cbdf69f0f59d7a2b32b5f0331e9f2ef9f1500470ad2ecbf0f78875124ed62716ea39d3d45558f44d7a1d404ecc3eee24ac8bc88dbe3af54067cc4fe2dee7181000ecca00d29ebcacd7fe45bcda7b42350f81aa21b8f425d818a99d6067485c96343bcd11ccc8752238f727ede3aedd8b81ce20f7cdb2551bb53eb49c0976e0f7bc46c69f40c177e52212b9fa1017d8f3b83336b9f5c4da60d1ea6d9c") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x0, 0xfffffffc, 0x3}) 23:07:36 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) 23:07:36 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socketpair(0xa, 0x6, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) 23:07:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:36 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x3, 0x4, {{0x3e, 0x4, 0x2, 0x3, 0xf8, 0x66, 0x0, 0x7f, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0xa9, 0x0, 0x8, [0x8, 0x6, 0x40]}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4c, 0x86, 0x1, 0x4, [{@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4020}, {@multicast2, 0x6}, {@local, 0x4}, {@multicast2, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff800}, {@rand_addr=0x64010100, 0x80}, {@rand_addr=0x64010100, 0x19}, {@rand_addr=0x64010100, 0xa606}]}, @cipso={0x86, 0x78, 0x2, [{0x5, 0x2}, {0x7, 0x12, "9f785a8a8bfc8c025df77f773fe58f01"}, {0x1, 0xe, "1d8b406c0fc3fc8a165fd20a"}, {0x2, 0xb, "1ebb2ccfd52b717d16"}, {0x2, 0xe, "4ddb110f424c0778b25f79a2"}, {0x6, 0xd, "a3e0d3d03ddadcd0cbcfab"}, {0x5, 0x12, "82e19a794407d53a7b8e848014a06c54"}, {0x2, 0x9, "1d8b885ced154d"}, {0x6, 0x8, "37cd8e08ead6"}, {0x1, 0x7, "73367f2a8e"}]}, @ra={0x94, 0x4}]}}}}}) 23:07:37 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="da1310d2b87ab4b8178506503af0d463e23f25f814be861282b754679e91804c7835ac5119202ca7bfacc2c32c4832745970955cb1aa70226254d4bba61951dda3deb8ab6579b992d8a2bcd3818d657253d9cbdf69f0f59d7a2b32b5f0331e9f2ef9f1500470ad2ecbf0f78875124ed62716ea39d3d45558f44d7a1d404ecc3eee24ac8bc88dbe3af54067cc4fe2dee7181000ecca00d29ebcacd7fe45bcda7b42350f81aa21b8f425d818a99d6067485c96343bcd11ccc8752238f727ede3aedd8b81ce20f7cdb2551bb53eb49c0976e0f7bc46c69f40c177e52212b9fa1017d8f3b83336b9f5c4da60d1ea6d9c") (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x0, 0xfffffffc, 0x3}) 23:07:37 executing program 3: socketpair(0xa, 0x80000, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20018004) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback}}) 23:07:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:37 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:37 executing program 5: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:37 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="da1310d2b87ab4b8178506503af0d463e23f25f814be861282b754679e91804c7835ac5119202ca7bfacc2c32c4832745970955cb1aa70226254d4bba61951dda3deb8ab6579b992d8a2bcd3818d657253d9cbdf69f0f59d7a2b32b5f0331e9f2ef9f1500470ad2ecbf0f78875124ed62716ea39d3d45558f44d7a1d404ecc3eee24ac8bc88dbe3af54067cc4fe2dee7181000ecca00d29ebcacd7fe45bcda7b42350f81aa21b8f425d818a99d6067485c96343bcd11ccc8752238f727ede3aedd8b81ce20f7cdb2551bb53eb49c0976e0f7bc46c69f40c177e52212b9fa1017d8f3b83336b9f5c4da60d1ea6d9c") (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x0, 0xfffffffc, 0x3}) 23:07:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x13}) r3 = dup(r1) r4 = dup(r3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:37 executing program 3: socketpair(0xa, 0x80000, 0x7, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20018004) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback}}) 23:07:37 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x94802, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x101400, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000100)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000180)={r4, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 23:07:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) syz_open_dev$mouse(&(0x7f0000000040), 0xffffffffffffffff, 0x290102) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffff8001}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x50}}, 0x48) 23:07:37 executing program 5: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:37 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) 23:07:37 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) 23:07:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) syz_open_dev$mouse(&(0x7f0000000040), 0xffffffffffffffff, 0x290102) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffff8001}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x50}}, 0x48) 23:07:37 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x94802, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x101400, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000100)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000180)={r4, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 23:07:38 executing program 5: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:38 executing program 3: socketpair(0xa, 0x80000, 0x7, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20018004) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@loopback}}) 23:07:38 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x94802, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x101400, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000100)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000180)={r4, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 23:07:38 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x13}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x13}) r3 = dup(r1) r4 = dup(r3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:38 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) 23:07:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x1c}}, 0x24000004) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) syz_open_dev$mouse(&(0x7f0000000040), 0xffffffffffffffff, 0x290102) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffff8001}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x50}}, 0x48) 23:07:38 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000340)=""/230, &(0x7f0000000440)=0xe6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00'}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000300)={{&(0x7f0000000280)={'Accelerator0\x00', {&(0x7f00000001c0)=@adf_hex={@format={'Cy', '4', 'RingRx\x00'}, {0x9}, {&(0x7f0000000100)=@adf_dec={@format={'Cy', '5', 'RingTx\x00'}, {0xc91d}}}}}}}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1}) 23:07:38 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r0, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4804) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x8001, 0x402) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x3ff, 0x40200) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000300)=0x1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000801) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x490000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000500)={r4, 0x7, &(0x7f0000000400)=[0x0, 0x9, 0x80000001, 0xffff730a, 0x8, 0x101, 0x7], &(0x7f0000000440)=[0x55a0], 0x11, 0x4, 0x5, &(0x7f0000000480)=[0x7fffffff, 0x4, 0x4, 0xdd], &(0x7f00000004c0)=[0xfffffff8, 0xb73, 0x7]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbb95}]}, 0x44}}, 0x804) socketpair(0x8, 0x6, 0x0, 0x0) 23:07:38 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r0, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4804) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x8001, 0x402) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x3ff, 0x40200) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000300)=0x1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000801) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x490000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000500)={r4, 0x7, &(0x7f0000000400)=[0x0, 0x9, 0x80000001, 0xffff730a, 0x8, 0x101, 0x7], &(0x7f0000000440)=[0x55a0], 0x11, 0x4, 0x5, &(0x7f0000000480)=[0x7fffffff, 0x4, 0x4, 0xdd], &(0x7f00000004c0)=[0xfffffff8, 0xb73, 0x7]}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbb95}]}, 0x44}}, 0x804) socketpair(0x8, 0x6, 0x0, 0x0) 23:07:38 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000340)=""/230, &(0x7f0000000440)=0xe6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00'}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000300)={{&(0x7f0000000280)={'Accelerator0\x00', {&(0x7f00000001c0)=@adf_hex={@format={'Cy', '4', 'RingRx\x00'}, {0x9}, {&(0x7f0000000100)=@adf_dec={@format={'Cy', '5', 'RingTx\x00'}, {0xc91d}}}}}}}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000340)=""/230, &(0x7f0000000440)=0xe6) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00'}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000300)={{&(0x7f0000000280)={'Accelerator0\x00', {&(0x7f00000001c0)=@adf_hex={@format={'Cy', '4', 'RingRx\x00'}, {0x9}, {&(0x7f0000000100)=@adf_dec={@format={'Cy', '5', 'RingTx\x00'}, {0xc91d}}}}}}}}) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1}) (async) 23:07:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000000)={[0x100]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x1c}}, 0x24000004) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:38 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r0, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4804) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x8001, 0x402) syz_open_dev$vcsa(&(0x7f00000002c0), 0x3ff, 0x40200) (async) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x3ff, 0x40200) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000300)=0x1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000801) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000801) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x490000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000500)={r4, 0x7, &(0x7f0000000400)=[0x0, 0x9, 0x80000001, 0xffff730a, 0x8, 0x101, 0x7], &(0x7f0000000440)=[0x55a0], 0x11, 0x4, 0x5, &(0x7f0000000480)=[0x7fffffff, 0x4, 0x4, 0xdd], &(0x7f00000004c0)=[0xfffffff8, 0xb73, 0x7]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbb95}]}, 0x44}}, 0x804) (async) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbb95}]}, 0x44}}, 0x804) socketpair(0x8, 0x6, 0x0, 0x0) 23:07:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x601, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}}, 0x7faa48f82888509f) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c001) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0xfffffffffffffe49}}, 0x0) 23:07:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x13}) r3 = dup(r1) r4 = dup(r3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) dup(r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x13}) (async) dup(r1) (async) dup(r3) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5) (async) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) (async) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) (async) 23:07:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x1c}}, 0x24000004) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x1c}}, 0x24000004) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) 23:07:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000000)={[0x100]}, 0x8) (async) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000000)={[0x100]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:39 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@remote}, {@dev}, {@dev}, {@empty}]}}) 23:07:39 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000340)=""/230, &(0x7f0000000440)=0xe6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00'}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000300)={{&(0x7f0000000280)={'Accelerator0\x00', {&(0x7f00000001c0)=@adf_hex={@format={'Cy', '4', 'RingRx\x00'}, {0x9}, {&(0x7f0000000100)=@adf_dec={@format={'Cy', '5', 'RingTx\x00'}, {0xc91d}}}}}}}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) (async, rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) (async) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1}) 23:07:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x601, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}}, 0x7faa48f82888509f) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c001) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0xfffffffffffffe49}}, 0x0) 23:07:39 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@remote}, {@dev}, {@dev}, {@empty}]}}) socketpair(0xa, 0x6, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@remote}, {@dev}, {@dev}, {@empty}]}}) (async) 23:07:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000000)={[0x100]}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff}) 23:07:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000500feffffffffffffff0000"], 0x1c}}, 0x0) 23:07:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x601, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}}, 0x7faa48f82888509f) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c001) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0xfffffffffffffe49}}, 0x0) 23:07:39 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000001280)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000001200)={0x1, {&(0x7f0000000100)=""/4096, 0x1000, &(0x7f0000001100)=""/248, 0x3, 0x3}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 23:07:39 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x8000000000000000, 0x105000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0xffffffff}) [ 1330.535731] kasan: CONFIG_KASAN_INLINE enabled [ 1330.541072] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1330.557037] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1330.563312] Modules linked in: [ 1330.566523] CPU: 0 PID: 3200 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 [ 1330.574331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1330.583837] task: ffff88809ddee680 task.stack: ffff88808d6c0000 [ 1330.589923] RIP: 0010:vhost_chr_write_iter+0x873/0x1100 [ 1330.595293] RSP: 0018:ffff88808d6c7c00 EFLAGS: 00010246 [ 1330.600669] RAX: dffffc0000000000 RBX: ffff888085926000 RCX: 0000000000000000 [ 1330.607946] RDX: 0000000000000002 RSI: ffffffff857f16f5 RDI: ffff8880859260c0 [ 1330.615227] RBP: ffffed1010b24c11 R08: 0000000000000000 R09: 000000000004068d [ 1330.622502] R10: ffff88809ddeef58 R11: ffff88809ddee680 R12: 0000000000000002 [ 1330.629761] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff11011ad8f87 [ 1330.637017] FS: 00007f3faa8a8700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 1330.645228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1330.651120] CR2: 00007ffc0fd5dc9c CR3: 00000000a63b0000 CR4: 00000000003406f0 [ 1330.658476] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1330.665742] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1330.672997] Call Trace: [ 1330.675579] ? log_write_hva+0x310/0x310 [ 1330.679665] ? lock_downgrade+0x740/0x740 [ 1330.683829] ? iov_iter_init+0xa6/0x1c0 [ 1330.687792] __vfs_write+0x44c/0x630 [ 1330.691499] ? kernel_read+0x110/0x110 [ 1330.695379] ? rw_verify_area+0xe1/0x2a0 [ 1330.699433] vfs_write+0x17f/0x4d0 [ 1330.702985] SyS_write+0xf2/0x210 [ 1330.706439] ? SyS_read+0x210/0x210 [ 1330.710050] ? __fdget+0x167/0x1f0 [ 1330.713594] ? do_syscall_64+0x4c/0x640 [ 1330.717566] ? SyS_read+0x210/0x210 [ 1330.721182] do_syscall_64+0x1d5/0x640 [ 1330.725062] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1330.730256] RIP: 0033:0x7f3fac3360f9 [ 1330.733969] RSP: 002b:00007f3faa8a8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1330.741848] RAX: ffffffffffffffda RBX: 00007f3fac455f80 RCX: 00007f3fac3360f9 [ 1330.749112] RDX: 0000000000000048 RSI: 0000000020001200 RDI: 0000000000000003 [ 1330.756370] RBP: 00007f3fac391ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1330.763642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.770897] R13: 00007ffc61c785df R14: 00007f3faa8a8300 R15: 0000000000022000 23:07:40 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) dup(r1) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) r3 = dup(r2) socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 23:07:40 executing program 3: socketpair(0xa, 0x6, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@remote}, {@dev}, {@dev}, {@empty}]}}) 23:07:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=@deltaction={0x140, 0x31, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x28}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x840}, 0x800) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) 23:07:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000500feffffffffffffff0000"], 0x1c}}, 0x0) 23:07:40 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x8000000000000000, 0x105000) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xf7e51b58ec661ff, 0x0, 0xffffffff}) [ 1330.778163] Code: ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c6 06 00 00 4c 8b ab c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e9 48 c1 e9 03 <80> 3c 01 00 0f 85 8f 06 00 00 49 8b 6d 00 48 85 ed 0f 84 e4 03 [ 1330.797396] RIP: vhost_chr_write_iter+0x873/0x1100 RSP: ffff88808d6c7c00 [ 1330.816931] ---[ end trace 581df2e9b05e2f27 ]--- [ 1330.835096] Kernel panic - not syncing: Fatal exception [ 1330.840669] Kernel Offset: disabled [ 1330.844290] Rebooting in 86400 seconds..