@cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) r12 = openat$iommufd(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$IOMMU_IOAS_COPY(r12, 0x3b83, &(0x7f00000009c0)={0x28, 0x3, 0x0, 0x0, 0x8000000000000000, 0x1, 0xffffffffffff5c47}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r5 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r7 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000380)={0xc, r8}) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f00000003c0)={0x8, r8}) r9 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r9, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r10, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r11}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r10}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r12) r13 = syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0x40240) ioctl$NBD_CLEAR_SOCK(r13, 0xab04) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/ipc\x00') ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000680)={0x18, r11, 0xed, 0x6}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000006c0)={{&(0x7f0000bfd000/0x3000)=nil, 0x3000}, 0x3}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004004) 09:10:30 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x0, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) r12 = openat$iommufd(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$IOMMU_IOAS_COPY(r12, 0x3b83, &(0x7f00000009c0)={0x28, 0x3, 0x0, 0x0, 0x8000000000000000, 0x1, 0xffffffffffff5c47}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r11) r12 = syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0x40240) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/ipc\x00') ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000680)={0x18, r10, 0xed, 0x6}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000006c0)={{&(0x7f0000bfd000/0x3000)=nil, 0x3000}, 0x3}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) r12 = openat$iommufd(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$IOMMU_IOAS_COPY(r12, 0x3b83, &(0x7f00000009c0)={0x28, 0x3, 0x0, 0x0, 0x8000000000000000, 0x1, 0xffffffffffff5c47}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r11) r12 = syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0x40240) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/ipc\x00') ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000680)={0x18, r10, 0xed, 0x6}) 09:10:30 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5b, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0x2}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) r12 = openat$iommufd(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$IOMMU_IOAS_COPY(r12, 0x3b83, &(0x7f00000009c0)={0x28, 0x3, 0x0, 0x0, 0x8000000000000000, 0x1, 0xffffffffffff5c47}) syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) 09:10:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) r12 = openat$iommufd(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$IOMMU_IOAS_COPY(r12, 0x3b83, &(0x7f00000009c0)={0x28, 0x3, 0x0, 0x0, 0x8000000000000000, 0x1, 0xffffffffffff5c47}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r11) r12 = syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0x40240) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/ipc\x00') 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r11) r12 = syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0x40240) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) r12 = openat$iommufd(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$IOMMU_IOAS_COPY(r12, 0x3b83, &(0x7f00000009c0)={0x28, 0x3, 0x0, 0x0, 0x8000000000000000, 0x1, 0xffffffffffff5c47}) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r11) syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0x40240) 09:10:30 executing program 1: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r11) r12 = syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0x40240) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/ipc\x00') ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000680)={0x18, r10, 0xed, 0x6}) 09:10:30 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5b, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0x2}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) openat$iommufd(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r11) 09:10:30 executing program 1: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r11) syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0x40240) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)) 09:10:30 executing program 1: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) socketpair(0x2b, 0xa, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r11) r12 = syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0x40240) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/ipc\x00') ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000680)={0x18, r10, 0xed, 0x6}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000540)={0xc, r9}) 09:10:30 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0x9, "42e3b40040020c"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) 09:10:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) r12 = openat$iommufd(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$IOMMU_IOAS_COPY(r12, 0x3b83, &(0x7f00000009c0)={0x28, 0x3, 0x0, 0x0, 0x8000000000000000, 0x1, 0xffffffffffff5c47}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000500)={0x38, 0x6, r10}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) 09:10:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) r12 = openat$iommufd(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$IOMMU_IOAS_COPY(r12, 0x3b83, &(0x7f00000009c0)={0x28, 0x3, 0x0, 0x0, 0x8000000000000000, 0x1, 0xffffffffffff5c47}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000004c0)={0xc}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) 09:10:30 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0x9, "42e3b40040020c"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x0, 0x40000) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x28008000) r12 = openat$iommufd(0xffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$IOMMU_IOAS_COPY(r12, 0x3b83, &(0x7f00000009c0)={0x28, 0x3, 0x0, 0x0, 0x8000000000000000, 0x1, 0xffffffffffff5c47}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd5b]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x2c}}, 0x2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000540)={0x2}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) 09:10:30 executing program 1: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) syz_open_dev$mouse(&(0x7f0000000500), 0x9, 0x151400) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) 09:10:30 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0x9, "42e3b40040020c"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r7 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x38, 0x6, 0x0, 0x0, r6}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:30 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0x9, "42e3b40040020c"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="7a3b45d1340c1b869e6fd2a7cc3690292f56aad5687becc4bf3b74a154e83e7e8328b013f5ca19f4f6dab9bb83082ee1402a1b69f7f5cd33dba8b32d45b29b4eb9a89bbbd019409c180b2b58f4959a8accac4f03ba8f2276f6bbbd24f090cd98c54edabf372452bea92dc256d4b2619581729bc8fff1180918ca1decdf96b86d63f8164fc5300e720517f8dafe582a42c208accf8c0c5586a8f725e7632fe9efe7db00518e8176f5e861d294a3f0f41a371bf70e00b6529638ef5f470d4fd2a1ab6e3c72a6b546bf16d97f162bbfe2e0005c1903dd8b9507e91ba35fbeb9f7573b88999d158ad159774b9bfabaefe74926843547ca35ecc6a548", 0xfa, 0x10000}) r6 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) accept4$inet6(r5, 0x0, &(0x7f0000000480), 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r5 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) write$6lowpan_control(r4, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 2', 0x1b) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r5 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x2, [0x7fff, 0xff]}, &(0x7f0000000400)=0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:30 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) 09:10:30 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xc, "42e3b40040020cd68a59"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="7a3b45d1340c1b869e6fd2a7cc3690292f56aad5687becc4bf3b74a154e83e7e8328b013f5ca19f4f6dab9bb83082ee1402a1b69f7f5cd33dba8b32d45b29b4eb9a89bbbd019409c180b2b58f4959a8accac4f03ba8f2276f6bbbd24f090cd98c54edabf372452bea92dc256d4b2619581729bc8fff1180918ca1decdf96b86d63f8164fc5300e720517f8dafe582a42c208accf8c0c5586a8f725e7632fe9efe7db00518e8176f5e861d294a3f0f41a371bf70e00b6529638ef5f470d4fd2a1ab6e3c72a6b546bf16d97f162bbfe2e0005c1903dd8b9507e91ba35fbeb9f7573b88999d158ad159774b9bfabaefe74926843547ca35ecc6a548", 0xfa, 0x10000}) r5 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x20) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:30 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0x9, "42e3b40040020c"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r3, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) r4 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r3, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="7a3b45d1340c1b869e6fd2a7cc3690292f56aad5687becc4bf3b74a154e83e7e8328b013f5ca19f4f6dab9bb83082ee1402a1b69f7f5cd33dba8b32d45b29b4eb9a89bbbd019409c180b2b58f4959a8accac4f03ba8f2276f6bbbd24f090cd98c54edabf372452bea92dc256d4b2619581729bc8fff1180918ca1decdf96b86d63f8164fc5300e720517f8dafe582a42c208accf8c0c5586a8f725e7632fe9efe7db00518e8176f5e861d294a3f0f41a371bf70e00b6529638ef5f470d4fd2a1ab6e3c72a6b546bf16d97f162bbfe2e0005c1903dd8b9507e91ba35fbeb9f7573b88999d158ad159774b9bfabaefe74926843547ca35ecc6a548", 0xfa, 0x10000}) r4 = socket$inet6(0xa, 0x1, 0xffff) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000300)=0x1, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r3, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="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", 0xfa, 0x10000}) socket$inet6(0xa, 0x1, 0xffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xc, "42e3b40040020cd68a59"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xc, "42e3b40040020cd68a59"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r3, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, &(0x7f00000001c0)="7a3b45d1340c1b869e6fd2a7cc3690292f56aad5687becc4bf3b74a154e83e7e8328b013f5ca19f4f6dab9bb83082ee1402a1b69f7f5cd33dba8b32d45b29b4eb9a89bbbd019409c180b2b58f4959a8accac4f03ba8f2276f6bbbd24f090cd98c54edabf372452bea92dc256d4b2619581729bc8fff1180918ca1decdf96b86d63f8164fc5300e720517f8dafe582a42c208accf8c0c5586a8f725e7632fe9efe7db00518e8176f5e861d294a3f0f41a371bf70e00b6529638ef5f470d4fd2a1ab6e3c72a6b546bf16d97f162bbfe2e0005c1903dd8b9507e91ba35fbeb9f7573b88999d158ad159774b9bfabaefe74926843547ca35ecc6a548", 0xfa, 0x10000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x58e) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r3, 0x0, 0x1, 0x0, 0x6, 0x1753b, 0x122e72}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r2 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x58e) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 1: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xc, "42e3b40040020cd68a59"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 1: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x400000, 0x7) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00007fd000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xcb2, 0x4a001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) r6 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x8001) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000380)={0xc, r7}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000003c0)={0x8, r7}) r8 = openat$iommufd(0xffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000440)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000480)={0x18, 0x1, 0x0, 0x0, r9, 0x64}) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}]}, 0x18) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) userfaultfd(0x80801) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xe, "42e3b40040020cd68a59a0dc"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:31 executing program 0: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) socketpair(0x22, 0x1, 0x5, &(0x7f00000000c0)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (fail_nth: 1) 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x2, 0x1, 0x3, 0x7, 0x1, 0x800}, 0x20) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) [ 127.707990][T17711] FAULT_INJECTION: forcing a failure. [ 127.707990][T17711] name fail_usercopy, interval 1, probability 0, space 0, times 1 09:10:31 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) [ 127.716763][T17711] CPU: 2 PID: 17711 Comm: syz-executor.1 Not tainted 6.6.0-syzkaller #0 09:10:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) [ 127.720533][T17711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 127.724547][T17711] Call Trace: [ 127.725767][T17711] [ 127.726843][T17711] dump_stack_lvl+0x125/0x1b0 [ 127.728634][T17711] should_fail_ex+0x496/0x5b0 [ 127.730182][T17711] _copy_to_user+0x30/0xb0 [ 127.731688][T17711] simple_read_from_buffer+0xd0/0x150 [ 127.733572][T17711] proc_fail_nth_read+0x1b0/0x280 [ 127.735400][T17711] ? proc_tid_comm_permission+0x1f0/0x1f0 [ 127.737474][T17711] ? security_file_permission+0xdc/0x100 [ 127.739623][T17711] ? proc_tid_comm_permission+0x1f0/0x1f0 [ 127.741712][T17711] vfs_read+0x1ce/0x930 [ 127.743578][T17711] ? kernel_read+0x1b0/0x1b0 [ 127.745749][T17711] ? __fget_files+0x272/0x410 [ 127.748078][T17711] ksys_read+0x12f/0x250 [ 127.750092][T17711] ? vfs_write+0xe40/0xe40 [ 127.752188][T17711] __do_fast_syscall_32+0x61/0xe0 [ 127.754693][T17711] do_fast_syscall_32+0x33/0x70 [ 127.756966][T17711] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 127.759881][T17711] RIP: 0023:0xf7f59579 [ 127.761782][T17711] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 127.770757][T17711] RSP: 002b:00000000f7f545e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 127.774313][T17711] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f7f54670 [ 127.777713][T17711] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 127.781387][T17711] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 127.785192][T17711] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 127.788850][T17711] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.792515][T17711] 09:10:31 executing program 0: r0 = openat$iommufd(0xffffff9c, 0x0, 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xe, "42e3b40040020cd68a59a0dc"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:31 executing program 0: r0 = openat$iommufd(0xffffff9c, 0x0, 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 0: r0 = openat$iommufd(0xffffff9c, 0x0, 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xe, "42e3b40040020cd68a59a0dc"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:31 executing program 3: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 3: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 3: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5a, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 0: openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 0: openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5a, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:31 executing program 0: openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x1, 0x100000001}, {0x0, 0x8}, {0x1, 0x8000000000000001}, {0xfffffffffffffc00, 0x9}, {0x7, 0x5}, {0x8000, 0x9}]}) 09:10:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 09:10:31 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) 09:10:31 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x40000) 09:10:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) 09:10:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5a, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:31 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) 09:10:31 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, r3, r4], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5a, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:32 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, r3, r4], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:32 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x44, 0x4, 0x2, 0x1, 0x110, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5c, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0x2}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:32 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, r3, r4], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0xffff, 0x5}, {0x1, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9d}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80d0}, 0x6761b27b5cd4d059) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, r3, r4], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0xffff, 0x5}, {0x1, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9d}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80d0}, 0x6761b27b5cd4d059) 09:10:32 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 09:10:32 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x44, 0x4, 0x2, 0x1, 0x110, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5c, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0x2}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0xffff, 0x5}, {0x1, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9d}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80d0}, 0x6761b27b5cd4d059) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, r3, r4], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 09:10:32 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, r3, r4], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, r3, r4], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 09:10:32 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, r3, r4], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 09:10:32 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x44, 0x4, 0x2, 0x1, 0x110, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5c, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0x2}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:32 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, r3, r4], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) (async) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) (async) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 09:10:32 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x7}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) 09:10:32 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0x8, "cbcc6d119d1f"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:32 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) 09:10:32 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)) (async) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) 09:10:32 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x800) accept4$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80000) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}], 0x1) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 09:10:32 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) 09:10:32 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0x8, "cbcc6d119d1f"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x800) accept4$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80000) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}], 0x1) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, r0, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x800) accept4$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80000) (async) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}], 0x1) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 09:10:32 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) 09:10:32 executing program 3: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000800)={0x35, 0xa5ca, 0x36e, 0x5, 0xc0, 0x5, 0x9a9}, 0xc) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x2a, 0xffffffffffffffff}, 0xc, &(0x7f0000000380)=[{&(0x7f00000001c0)="8a5fad9540d3ad3fd98d57139ba83a065921a9a6a27e433fe3f45c0d13cc0b1e87a2e89f63aa58f8189282", 0x2b}, {&(0x7f0000000200)="aaf24cd8a97afc8eac134343dd07565577fb8781300b34f180969c1abe2e3cc1d599cfa0928564e95b8e2e104923271d5d3d42b31050124e2315f2017484974ddb9fa80c09397769170dad7ed450e632711c3b5d5932dd6e0c908ed9f0689b9a9e9f7b02c90971bf773e290de57370a5765e3db93ed7bf1db1e667a91decbc80e14d69e81cc3a51e6dbca3695b6d45e9a9985be4e93e86c8a79d91db229a6a109dca5033eeb1be6ea56652cb021761d82c9676787a9813a01c308ca4ac8f31b0f914a33c5183ab4609b1d11a311a4d6bba121cbd4f5a282bc4d44a3d4a8bfe", 0xdf}, {&(0x7f0000000300)="c490bb41f30420f6e9750f340225c51ff9e0f6155f840338104f11eda45d15e635a503917d24af8bce2206eab1ff1a3f6b40", 0x32}, {&(0x7f0000000340)="55010e3e0a4566701c9239f6adfb51d8a0129da7669fbd931b316f", 0x1b}], 0x4, &(0x7f00000003c0)=[{0x6c, 0x0, 0x1000, "898e8debbacdcc510f1848939969cc9eba02d7decc928e67ea98d0574e4d3b630884afc22c102705b92d76146b70c6aaa8d51725000822bf8d9f53dd1797ce6fff9d095cece0ad2b55d0f302419ddf26740b3136564e8335ac1d5366fc5a3a1d"}, {0x64, 0x10b, 0x6, "5bfc8182840d8d44a57ba60442cc16fb5ccc547be8e0751b586f627b47cff2637fe178a8e449333638a7aaf73bbbac62e5864ec578003bda4093c381f6dd8304b8b0eba66e06f838ee4f1e8cbdfdd514d752a69a6a83"}, {0xd0, 0x116, 0x2, "809afd9627c7fed68873483dab35869046c009a1ce13f4a56fabcaf4f235331ba69eaa3a230f60481c98a4433c2585dfec2bff7a3b66cd218b91593e21e41295bbaef116d41c6ba81630d4593077aa0731db16a7a3ac49ac4fb087478f1d13fedb143556a391db030c30f3384419854fca91d299ad878042a5b8b7866d0b1b1bce64263bbfeccc3ddfbd6c3df3fc4e6ac3f476c5342c0213b43d408fc5ed4cbacad13b4c416d8f6287f9457917adce51e434ede91e1fac2cc0a844af760144552569b1c8"}, {0x74, 0x115, 0x0, "80d8cb28ff6464642a81a021c46d9c592868054ee1bb0a62aad436247c0208bf85219594d285117ea3c288223ecf4a2ba33c66a354befc43b037cbd1ef9bc5f019c65024468cc8d7c1137ac5c5cbe8f13e386261f224ef3ace07c12cfa241d1dfa0765e4e8"}, {0x44, 0x10f, 0x4, "41467cc9613a337c612ced1a6b886f9ea5e74aa60abfdfbb323252ddbc3365d7552735d653e20059a2c6891890592762e51e223ce65a"}, {0x20, 0x107, 0x3, "e52b23f731318f2dc9b9f0f13d371d54c2"}, {0x48, 0x119, 0x6563, "8f021496fe5d5e4364ee2fdaf280d0cff7b0851d12191e77b049f23e24b30a6c7ed0db45654fa5b394c6f5c451c1b1666f03a198323d018037"}, {0x88, 0x108, 0x3, "5fbac3c915e01d171757939ec2493d2e27819c6126ff09bb1f3d9e715f09a72e4c366ab75498a8c8cc2bd5fc0efabb24bc0086955323beb0266a252a140e9a85aef101a022b2b7508a563c309882e22b3911e40c551dcf6ffca5b71eb684621e1ed86c346967e5a3a0e6a6ba08bac525f9de9b5ee66ef5e0f5b0134e"}], 0x348, 0x24004004}, 0x1c) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}]}, 0x34}}, 0x60000045) socketpair(0x15, 0x4, 0x101, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0000002900080029bd6000fcdbdf2500000000", @ANYRES64=r1, @ANYBLOB="0e000d0002001000e0ff000006000500fcf700000b0001006d717072696f000008000100647272000c00020008000100ff000000"], 0x4c}, 0x1, 0x0, 0x0, 0x404c885}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=0x6) 09:10:32 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000800)={0x35, 0xa5ca, 0x36e, 0x5, 0xc0, 0x5, 0x9a9}, 0xc) (async) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x2a, 0xffffffffffffffff}, 0xc, &(0x7f0000000380)=[{&(0x7f00000001c0)="8a5fad9540d3ad3fd98d57139ba83a065921a9a6a27e433fe3f45c0d13cc0b1e87a2e89f63aa58f8189282", 0x2b}, {&(0x7f0000000200)="aaf24cd8a97afc8eac134343dd07565577fb8781300b34f180969c1abe2e3cc1d599cfa0928564e95b8e2e104923271d5d3d42b31050124e2315f2017484974ddb9fa80c09397769170dad7ed450e632711c3b5d5932dd6e0c908ed9f0689b9a9e9f7b02c90971bf773e290de57370a5765e3db93ed7bf1db1e667a91decbc80e14d69e81cc3a51e6dbca3695b6d45e9a9985be4e93e86c8a79d91db229a6a109dca5033eeb1be6ea56652cb021761d82c9676787a9813a01c308ca4ac8f31b0f914a33c5183ab4609b1d11a311a4d6bba121cbd4f5a282bc4d44a3d4a8bfe", 0xdf}, {&(0x7f0000000300)="c490bb41f30420f6e9750f340225c51ff9e0f6155f840338104f11eda45d15e635a503917d24af8bce2206eab1ff1a3f6b40", 0x32}, {&(0x7f0000000340)="55010e3e0a4566701c9239f6adfb51d8a0129da7669fbd931b316f", 0x1b}], 0x4, &(0x7f00000003c0)=[{0x6c, 0x0, 0x1000, "898e8debbacdcc510f1848939969cc9eba02d7decc928e67ea98d0574e4d3b630884afc22c102705b92d76146b70c6aaa8d51725000822bf8d9f53dd1797ce6fff9d095cece0ad2b55d0f302419ddf26740b3136564e8335ac1d5366fc5a3a1d"}, {0x64, 0x10b, 0x6, "5bfc8182840d8d44a57ba60442cc16fb5ccc547be8e0751b586f627b47cff2637fe178a8e449333638a7aaf73bbbac62e5864ec578003bda4093c381f6dd8304b8b0eba66e06f838ee4f1e8cbdfdd514d752a69a6a83"}, {0xd0, 0x116, 0x2, "809afd9627c7fed68873483dab35869046c009a1ce13f4a56fabcaf4f235331ba69eaa3a230f60481c98a4433c2585dfec2bff7a3b66cd218b91593e21e41295bbaef116d41c6ba81630d4593077aa0731db16a7a3ac49ac4fb087478f1d13fedb143556a391db030c30f3384419854fca91d299ad878042a5b8b7866d0b1b1bce64263bbfeccc3ddfbd6c3df3fc4e6ac3f476c5342c0213b43d408fc5ed4cbacad13b4c416d8f6287f9457917adce51e434ede91e1fac2cc0a844af760144552569b1c8"}, {0x74, 0x115, 0x0, "80d8cb28ff6464642a81a021c46d9c592868054ee1bb0a62aad436247c0208bf85219594d285117ea3c288223ecf4a2ba33c66a354befc43b037cbd1ef9bc5f019c65024468cc8d7c1137ac5c5cbe8f13e386261f224ef3ace07c12cfa241d1dfa0765e4e8"}, {0x44, 0x10f, 0x4, "41467cc9613a337c612ced1a6b886f9ea5e74aa60abfdfbb323252ddbc3365d7552735d653e20059a2c6891890592762e51e223ce65a"}, {0x20, 0x107, 0x3, "e52b23f731318f2dc9b9f0f13d371d54c2"}, {0x48, 0x119, 0x6563, "8f021496fe5d5e4364ee2fdaf280d0cff7b0851d12191e77b049f23e24b30a6c7ed0db45654fa5b394c6f5c451c1b1666f03a198323d018037"}, {0x88, 0x108, 0x3, "5fbac3c915e01d171757939ec2493d2e27819c6126ff09bb1f3d9e715f09a72e4c366ab75498a8c8cc2bd5fc0efabb24bc0086955323beb0266a252a140e9a85aef101a022b2b7508a563c309882e22b3911e40c551dcf6ffca5b71eb684621e1ed86c346967e5a3a0e6a6ba08bac525f9de9b5ee66ef5e0f5b0134e"}], 0x348, 0x24004004}, 0x1c) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}]}, 0x34}}, 0x60000045) (async) socketpair(0x15, 0x4, 0x101, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0000002900080029bd6000fcdbdf2500000000", @ANYRES64=r1, @ANYBLOB="0e000d0002001000e0ff000006000500fcf700000b0001006d717072696f000008000100647272000c00020008000100ff000000"], 0x4c}, 0x1, 0x0, 0x0, 0x404c885}, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=0x6) 09:10:32 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0x8, "cbcc6d119d1f"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:32 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 0: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%p \x00'}, 0x1c) 09:10:32 executing program 3: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000800)={0x35, 0xa5ca, 0x36e, 0x5, 0xc0, 0x5, 0x9a9}, 0xc) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x2a, 0xffffffffffffffff}, 0xc, &(0x7f0000000380)=[{&(0x7f00000001c0)="8a5fad9540d3ad3fd98d57139ba83a065921a9a6a27e433fe3f45c0d13cc0b1e87a2e89f63aa58f8189282", 0x2b}, {&(0x7f0000000200)="aaf24cd8a97afc8eac134343dd07565577fb8781300b34f180969c1abe2e3cc1d599cfa0928564e95b8e2e104923271d5d3d42b31050124e2315f2017484974ddb9fa80c09397769170dad7ed450e632711c3b5d5932dd6e0c908ed9f0689b9a9e9f7b02c90971bf773e290de57370a5765e3db93ed7bf1db1e667a91decbc80e14d69e81cc3a51e6dbca3695b6d45e9a9985be4e93e86c8a79d91db229a6a109dca5033eeb1be6ea56652cb021761d82c9676787a9813a01c308ca4ac8f31b0f914a33c5183ab4609b1d11a311a4d6bba121cbd4f5a282bc4d44a3d4a8bfe", 0xdf}, {&(0x7f0000000300)="c490bb41f30420f6e9750f340225c51ff9e0f6155f840338104f11eda45d15e635a503917d24af8bce2206eab1ff1a3f6b40", 0x32}, {&(0x7f0000000340)="55010e3e0a4566701c9239f6adfb51d8a0129da7669fbd931b316f", 0x1b}], 0x4, &(0x7f00000003c0)=[{0x6c, 0x0, 0x1000, "898e8debbacdcc510f1848939969cc9eba02d7decc928e67ea98d0574e4d3b630884afc22c102705b92d76146b70c6aaa8d51725000822bf8d9f53dd1797ce6fff9d095cece0ad2b55d0f302419ddf26740b3136564e8335ac1d5366fc5a3a1d"}, {0x64, 0x10b, 0x6, "5bfc8182840d8d44a57ba60442cc16fb5ccc547be8e0751b586f627b47cff2637fe178a8e449333638a7aaf73bbbac62e5864ec578003bda4093c381f6dd8304b8b0eba66e06f838ee4f1e8cbdfdd514d752a69a6a83"}, {0xd0, 0x116, 0x2, "809afd9627c7fed68873483dab35869046c009a1ce13f4a56fabcaf4f235331ba69eaa3a230f60481c98a4433c2585dfec2bff7a3b66cd218b91593e21e41295bbaef116d41c6ba81630d4593077aa0731db16a7a3ac49ac4fb087478f1d13fedb143556a391db030c30f3384419854fca91d299ad878042a5b8b7866d0b1b1bce64263bbfeccc3ddfbd6c3df3fc4e6ac3f476c5342c0213b43d408fc5ed4cbacad13b4c416d8f6287f9457917adce51e434ede91e1fac2cc0a844af760144552569b1c8"}, {0x74, 0x115, 0x0, "80d8cb28ff6464642a81a021c46d9c592868054ee1bb0a62aad436247c0208bf85219594d285117ea3c288223ecf4a2ba33c66a354befc43b037cbd1ef9bc5f019c65024468cc8d7c1137ac5c5cbe8f13e386261f224ef3ace07c12cfa241d1dfa0765e4e8"}, {0x44, 0x10f, 0x4, "41467cc9613a337c612ced1a6b886f9ea5e74aa60abfdfbb323252ddbc3365d7552735d653e20059a2c6891890592762e51e223ce65a"}, {0x20, 0x107, 0x3, "e52b23f731318f2dc9b9f0f13d371d54c2"}, {0x48, 0x119, 0x6563, "8f021496fe5d5e4364ee2fdaf280d0cff7b0851d12191e77b049f23e24b30a6c7ed0db45654fa5b394c6f5c451c1b1666f03a198323d018037"}, {0x88, 0x108, 0x3, "5fbac3c915e01d171757939ec2493d2e27819c6126ff09bb1f3d9e715f09a72e4c366ab75498a8c8cc2bd5fc0efabb24bc0086955323beb0266a252a140e9a85aef101a022b2b7508a563c309882e22b3911e40c551dcf6ffca5b71eb684621e1ed86c346967e5a3a0e6a6ba08bac525f9de9b5ee66ef5e0f5b0134e"}], 0x348, 0x24004004}, 0x1c) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}]}, 0x34}}, 0x60000045) socketpair(0x15, 0x4, 0x101, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0000002900080029bd6000fcdbdf2500000000", @ANYRES64=r1, @ANYBLOB="0e000d0002001000e0ff000006000500fcf700000b0001006d717072696f000008000100647272000c00020008000100ff000000"], 0x4c}, 0x1, 0x0, 0x0, 0x404c885}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000800)={0x35, 0xa5ca, 0x36e, 0x5, 0xc0, 0x5, 0x9a9}, 0xc) (async) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x2a, 0xffffffffffffffff}, 0xc, &(0x7f0000000380)=[{&(0x7f00000001c0)="8a5fad9540d3ad3fd98d57139ba83a065921a9a6a27e433fe3f45c0d13cc0b1e87a2e89f63aa58f8189282", 0x2b}, {&(0x7f0000000200)="aaf24cd8a97afc8eac134343dd07565577fb8781300b34f180969c1abe2e3cc1d599cfa0928564e95b8e2e104923271d5d3d42b31050124e2315f2017484974ddb9fa80c09397769170dad7ed450e632711c3b5d5932dd6e0c908ed9f0689b9a9e9f7b02c90971bf773e290de57370a5765e3db93ed7bf1db1e667a91decbc80e14d69e81cc3a51e6dbca3695b6d45e9a9985be4e93e86c8a79d91db229a6a109dca5033eeb1be6ea56652cb021761d82c9676787a9813a01c308ca4ac8f31b0f914a33c5183ab4609b1d11a311a4d6bba121cbd4f5a282bc4d44a3d4a8bfe", 0xdf}, {&(0x7f0000000300)="c490bb41f30420f6e9750f340225c51ff9e0f6155f840338104f11eda45d15e635a503917d24af8bce2206eab1ff1a3f6b40", 0x32}, {&(0x7f0000000340)="55010e3e0a4566701c9239f6adfb51d8a0129da7669fbd931b316f", 0x1b}], 0x4, &(0x7f00000003c0)=[{0x6c, 0x0, 0x1000, "898e8debbacdcc510f1848939969cc9eba02d7decc928e67ea98d0574e4d3b630884afc22c102705b92d76146b70c6aaa8d51725000822bf8d9f53dd1797ce6fff9d095cece0ad2b55d0f302419ddf26740b3136564e8335ac1d5366fc5a3a1d"}, {0x64, 0x10b, 0x6, "5bfc8182840d8d44a57ba60442cc16fb5ccc547be8e0751b586f627b47cff2637fe178a8e449333638a7aaf73bbbac62e5864ec578003bda4093c381f6dd8304b8b0eba66e06f838ee4f1e8cbdfdd514d752a69a6a83"}, {0xd0, 0x116, 0x2, "809afd9627c7fed68873483dab35869046c009a1ce13f4a56fabcaf4f235331ba69eaa3a230f60481c98a4433c2585dfec2bff7a3b66cd218b91593e21e41295bbaef116d41c6ba81630d4593077aa0731db16a7a3ac49ac4fb087478f1d13fedb143556a391db030c30f3384419854fca91d299ad878042a5b8b7866d0b1b1bce64263bbfeccc3ddfbd6c3df3fc4e6ac3f476c5342c0213b43d408fc5ed4cbacad13b4c416d8f6287f9457917adce51e434ede91e1fac2cc0a844af760144552569b1c8"}, {0x74, 0x115, 0x0, "80d8cb28ff6464642a81a021c46d9c592868054ee1bb0a62aad436247c0208bf85219594d285117ea3c288223ecf4a2ba33c66a354befc43b037cbd1ef9bc5f019c65024468cc8d7c1137ac5c5cbe8f13e386261f224ef3ace07c12cfa241d1dfa0765e4e8"}, {0x44, 0x10f, 0x4, "41467cc9613a337c612ced1a6b886f9ea5e74aa60abfdfbb323252ddbc3365d7552735d653e20059a2c6891890592762e51e223ce65a"}, {0x20, 0x107, 0x3, "e52b23f731318f2dc9b9f0f13d371d54c2"}, {0x48, 0x119, 0x6563, "8f021496fe5d5e4364ee2fdaf280d0cff7b0851d12191e77b049f23e24b30a6c7ed0db45654fa5b394c6f5c451c1b1666f03a198323d018037"}, {0x88, 0x108, 0x3, "5fbac3c915e01d171757939ec2493d2e27819c6126ff09bb1f3d9e715f09a72e4c366ab75498a8c8cc2bd5fc0efabb24bc0086955323beb0266a252a140e9a85aef101a022b2b7508a563c309882e22b3911e40c551dcf6ffca5b71eb684621e1ed86c346967e5a3a0e6a6ba08bac525f9de9b5ee66ef5e0f5b0134e"}], 0x348, 0x24004004}, 0x1c) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}]}, 0x34}}, 0x60000045) (async) socketpair(0x15, 0x4, 0x101, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0000002900080029bd6000fcdbdf2500000000", @ANYRES64=r1, @ANYBLOB="0e000d0002001000e0ff000006000500fcf700000b0001006d717072696f000008000100647272000c00020008000100ff000000"], 0x4c}, 0x1, 0x0, 0x0, 0x404c885}, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=0x6) (async) 09:10:32 executing program 0: bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 09:10:32 executing program 3: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 0: bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2c) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:32 executing program 3: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xb, "cbcc6d119d1ffdedbb"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:32 executing program 0: bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2c) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:32 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:32 executing program 0: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f0000000240)='%p \x00'}, 0x1c) 09:10:32 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:32 executing program 0: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x1c) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2c) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:32 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:32 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:32 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xb, "cbcc6d119d1ffdedbb"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:32 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:32 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) userfaultfd(0x800) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:32 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:32 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xb, "cbcc6d119d1ffdedbb"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:33 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xd, "cbcc6d119d1ffdedbbf275"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:33 executing program 1: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x14, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:33 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 09:10:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xd, "cbcc6d119d1ffdedbbf275"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x13, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 09:10:33 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 09:10:33 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x12, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) 09:10:33 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 09:10:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xd, "cbcc6d119d1ffdedbbf275"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) 09:10:33 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xe, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x101, 0x4, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x65, 0x0, 0x6, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x2}]}}}}}) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xd, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x101, 0x4, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x65, 0x0, 0x6, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x2}]}}}}}) 09:10:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x66, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xb, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x101, 0x4, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x65, 0x0, 0x6, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x2}]}}}}}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x101, 0x4, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x65, 0x0, 0x6, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x2}]}}}}}) (async) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000002c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0xf51a4b59a827713b, 0x11) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) openat$cuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x4) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x4000804) 09:10:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x66, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000002c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0xf51a4b59a827713b, 0x11) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) openat$cuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x4) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x4000804) 09:10:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000002c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0xf51a4b59a827713b, 0x11) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) openat$cuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x4) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x4000804) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x2f, 0x4) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) socket$phonet_pipe(0x23, 0x5, 0x2) 09:10:33 executing program 0: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x66, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:33 executing program 0: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async, rerun: 64) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x2f, 0x4) (rerun: 64) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) accept4$bt_l2cap(r2, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) (async, rerun: 64) socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:33 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:33 executing program 1: ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 64) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x2f, 0x4) (async, rerun: 64) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 09:10:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x0, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:33 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x6) 09:10:33 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x8, 0x0, &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x0, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) ioctl$NBD_DISCONNECT(r1, 0xab08) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x6) 09:10:34 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x90) 09:10:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) (async, rerun: 64) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x6) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x12, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x0, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair(0x18, 0x6, 0x9, &(0x7f0000000000)) socketpair(0x2c, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socketpair(0x18, 0x6, 0x9, &(0x7f0000000000)) socketpair(0x2c, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xe, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair(0x18, 0x6, 0x9, &(0x7f0000000000)) socketpair(0x2c, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xd, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair(0x18, 0x6, 0x9, &(0x7f0000000000)) (async) socketpair(0x2c, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair(0x18, 0x6, 0x9, &(0x7f0000000000)) socketpair(0x2c, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x42, 0x4, 0x2, 0x1, 0x108, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x56, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000480)=@framed={{}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}]}, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x115a42) syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x490000) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000040)='GPL\x00', 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x115a42) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x115a42) syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x490000) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair(0x18, 0x6, 0x9, &(0x7f0000000000)) socketpair(0x2c, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0xad, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x115a42) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x490000) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x42, 0x4, 0x2, 0x1, 0x108, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x56, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:34 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair(0x18, 0x6, 0x9, &(0x7f0000000000)) socketpair(0x2c, 0x6, 0x8, &(0x7f0000000040)) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x2f, &(0x7f0000000080)=""/47, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 64) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair(0x2c, 0x6, 0x8, &(0x7f0000000040)) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x42, 0x4, 0x2, 0x1, 0x108, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x56, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:34 executing program 3: socketpair(0x2c, 0x6, 0x8, &(0x7f0000000040)) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 3: socketpair(0x0, 0x6, 0x8, &(0x7f0000000040)) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x10, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) (async) 09:10:34 executing program 3: socketpair(0x0, 0x6, 0x8, &(0x7f0000000040)) 09:10:34 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x0, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:34 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 09:10:34 executing program 3: socketpair(0x0, 0x6, 0x8, &(0x7f0000000040)) 09:10:34 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 3: socketpair(0x2c, 0x0, 0x8, &(0x7f0000000040)) 09:10:34 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x0, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x8, 0x0, &(0x7f0000000300)=[{0x0, 0x5, 0xa, 0xa}, {0x5, 0x3, 0xb, 0xa}, {0x4, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x6, 0x5}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc}, {0x4, 0xffffffff, 0xc, 0x4}], 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 3: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000040)) 09:10:34 executing program 3: socketpair(0x2c, 0x0, 0x0, 0x0) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) 09:10:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:34 executing program 3: socketpair(0x2c, 0x0, 0x0, 0x0) 09:10:34 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x90) 09:10:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:34 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x0, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:34 executing program 3: socketpair(0x2c, 0x0, 0x0, 0x0) 09:10:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 09:10:35 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x58, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) (async) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x10, 0x4011dda0, 0xc9e9, {{0x12, 0x4, 0x3, 0x4, 0x48, 0x68, 0x0, 0x20, 0x4, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x1f, 0xc0, [@rand_addr=0x64010102, @loopback, @empty, @loopback, @rand_addr=0x64010100, @broadcast, @loopback]}, @lsrr={0x83, 0x13, 0xb1, [@multicast1, @multicast1, @multicast2, @multicast2]}]}}}}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x10, 0x4011dda0, 0xc9e9, {{0x12, 0x4, 0x3, 0x4, 0x48, 0x68, 0x0, 0x20, 0x4, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x1f, 0xc0, [@rand_addr=0x64010102, @loopback, @empty, @loopback, @rand_addr=0x64010100, @broadcast, @loopback]}, @lsrr={0x83, 0x13, 0xb1, [@multicast1, @multicast1, @multicast2, @multicast2]}]}}}}}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 3: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x58, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x10, 0x4011dda0, 0xc9e9, {{0x12, 0x4, 0x3, 0x4, 0x48, 0x68, 0x0, 0x20, 0x4, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x1f, 0xc0, [@rand_addr=0x64010102, @loopback, @empty, @loopback, @rand_addr=0x64010100, @broadcast, @loopback]}, @lsrr={0x83, 0x13, 0xb1, [@multicast1, @multicast1, @multicast2, @multicast2]}]}}}}}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 3: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 0: accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002040)={0x90, 0x0, r0, {0x6, 0x0, 0x10001, 0x2ced, 0x80000001, 0x5, {0x0, 0x3f, 0x100000001, 0x3, 0xe446, 0x0, 0xffffffff, 0x8, 0x27f, 0x8000, 0x0, 0xee01, 0xee01, 0x5, 0x1}}}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 3: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 0: accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x58, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002040)={0x90, 0x0, r0, {0x6, 0x0, 0x10001, 0x2ced, 0x80000001, 0x5, {0x0, 0x3f, 0x100000001, 0x3, 0xe446, 0x0, 0xffffffff, 0x8, 0x27f, 0x8000, 0x0, 0xee01, 0xee01, 0x5, 0x1}}}, 0x90) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 0: accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002040)={0x90, 0x0, r0, {0x6, 0x0, 0x10001, 0x2ced, 0x80000001, 0x5, {0x0, 0x3f, 0x100000001, 0x3, 0xe446, 0x0, 0xffffffff, 0x8, 0x27f, 0x8000, 0x0, 0xee01, 0xee01, 0x5, 0x1}}}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002040)={0x90, 0x0, r0, {0x6, 0x0, 0x10001, 0x2ced, 0x80000001, 0x5, {0x0, 0x3f, 0x100000001, 0x3, 0xe446, 0x0, 0xffffffff, 0x8, 0x27f, 0x8000, 0x0, 0xee01, 0xee01, 0x5, 0x1}}}, 0x90) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffff7) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:35 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x60, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0xa, "608523b0bc0676ed"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffff7) (async, rerun: 64) accept4$inet6(r1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffff7) (async) accept4$inet6(r1, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:35 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x60, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0xa, "608523b0bc0676ed"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 1: ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 1: ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x7) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:35 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x60, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0xa, "608523b0bc0676ed"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 09:10:35 executing program 1: ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x7) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:35 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff, 0x1}, 0xe) 09:10:35 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x60, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0xa, "608523b0bc0676ed"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 09:10:35 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff, 0x1}, 0xe) 09:10:35 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff, 0x1}, 0xe) 09:10:35 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff, 0x1}, 0xe) 09:10:35 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) 09:10:35 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff, 0x1}, 0xe) 09:10:35 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 09:10:35 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 0: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff, 0x1}, 0xe) 09:10:35 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 09:10:35 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x64, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0xe, "608523b0bc0676ed82f4cb2d"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:35 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff, 0x1}, 0xe) 09:10:35 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffff7) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:35 executing program 0: connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 09:10:35 executing program 1: bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0xffffffff}, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffff7) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x9, "63c57b"}, 0x6) 09:10:35 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x64, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0xe, "608523b0bc0676ed82f4cb2d"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:35 executing program 1: bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0xffffffff}, 0xc) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002040)={0x90, 0x0, r0, {0x6, 0x0, 0x10001, 0x2ced, 0x80000001, 0x5, {0x0, 0x3f, 0x100000001, 0x3, 0xe446, 0x0, 0xffffffff, 0x8, 0x27f, 0x8000, 0x0, 0xee01, 0xee01, 0x5, 0x1}}}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffff7) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:35 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002040)={0x90, 0x0, r0, {0x6, 0x0, 0x10001, 0x2ced, 0x80000001, 0x5, {0x0, 0x3f, 0x100000001, 0x3, 0xe446, 0x0, 0xffffffff, 0x8, 0x27f, 0x8000, 0x0, 0xee01, 0xee01, 0x5, 0x1}}}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 1: bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0xffffffff}, 0xc) (async) bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0xffffffff}, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffff7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:35 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002040)={0x90, 0x0, r0, {0x6, 0x0, 0x10001, 0x2ced, 0x80000001, 0x5, {0x0, 0x3f, 0x100000001, 0x3, 0xe446, 0x0, 0xffffffff, 0x8, 0x27f, 0x8000, 0x0, 0xee01, 0xee01, 0x5, 0x1}}}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x64, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0xe, "608523b0bc0676ed82f4cb2d"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:36 executing program 1: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0xe02c0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x404000, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002040)={0x90, 0x0, r0, {0x6, 0x0, 0x10001, 0x2ced, 0x80000001, 0x5, {0x0, 0x3f, 0x100000001, 0x3, 0xe446, 0x0, 0xffffffff, 0x8, 0x27f, 0x8000, 0x0, 0xee01, 0xee01, 0x5, 0x1}}}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 09:10:36 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002040)={0x90, 0x0, r0, {0x6, 0x0, 0x10001, 0x2ced, 0x80000001, 0x5, {0x0, 0x3f, 0x100000001, 0x3, 0xe446, 0x0, 0xffffffff, 0x8, 0x27f, 0x8000, 0x0, 0xee01, 0xee01, 0x5, 0x1}}}, 0x90) 09:10:36 executing program 1: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0xe02c0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x404000, 0x10) (async, rerun: 32) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (rerun: 32) 09:10:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) [ 132.470204][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.472583][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 09:10:36 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x66, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x10, "608523b0bc0676ed82f4cb2de67a"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0xe02c0, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x404000, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) 09:10:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x66, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x10, "608523b0bc0676ed82f4cb2de67a"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x7f, 0x40080) sendmmsg$alg(r1, &(0x7f0000003180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="7fe513c3e103ce1f61234b864843b2d25c1ef612f483d1f5a4393470f82ea8cd941ef622be8dc9f500b0e0160f7c876997f1c6a293a97c52f8a2a9280340bac40a6dda6ea209a9c86a74453b20132cf606a87028af4737c37b3b1d33856668f06977b2866cd912b4b89ea95ad4aebe4e07ec7224520394cb1136b83e38d5c5626dca7742c0ba921a3c8cc04111672fbaef6fc83b1a3428611a7bf26de48fd1621f122a9cfdc1f211c62021987ab7a9786e4b465e437e86d41720ae938b51720ac708930cd47198dd5f78b925dedf5e594a5192992e870a66966e98706bade5d5553bb489b27c6971e1c551a9337d", 0xee}], 0x1, &(0x7f0000000180)=[@iv={0x2c, 0x117, 0x2, 0x1b, "acaba66e548f2bfc7d652e23e3ebfb2a1eae03b50349e2e38e3595"}, @iv={0xdc, 0x117, 0x2, 0xca, "309a4f69a53687f8274db158ab634b425b088cfc0805c7c652baceeaf6ebee5a59ade2e733749b15a62ff76fc3e39463f3ccb5cd4610da89dedf8fbafdf7a09e23681ce4e55ddb3137b07349eb6b1eda04a08eacee7c2f088ca111afc5c11b74c5f0ec74ebca6cdc974a5cebafa947c027a337afa66bd456ccb6411d8f5dfec1cd034ef903b6d18b6af089c58476dc9c1e9bf8dad74854c271c1f9ecd60f26472f97dd77388b58c40c91b5ee67130669a56d963b2e6d5b9114c1542e2dad3d05506afe1c958bd3e70746"}], 0x108, 0x40000}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="633beaf8e0d0156725322c5e77", 0xd}, {&(0x7f0000000300)="4fc3a77e6b824f02792843ff6f63f639431006b5373a7cdbd3ea3a99a772a76517706564313897045422a698d7dc0e4dde5258945874e73308e7842494d0b3d776a22fafeceac3babee9e32aa984a86aa2f18cb7ff82b8dbcb52792a9780bf8196327761f4c0cba97dddb362046cea03478027b880f4251c478914ecf92460a293b5647885d0b97c5ae01196837db66aec7a4cf2a7c7e355469a0e63ba4cb3019f0d7d7fd0f7fce29acad92f6f0df7c26e2a16c78a04b6bc8a1e4cc5cde32f9d538471", 0xc3}, {&(0x7f0000000400)="61dd3f86d8cd9c71f02cf029011fe040743c6fff788ef8712a0640a314cf4c971a909b77b5481025", 0x28}, {&(0x7f0000000440)="17932919aefd05825e64fd3273072828de2e57dc6fa27786375cc85c3912db8a6fe53ff8222cc871c56fa242ede9cb5164bf9a4188ad87a2dc7e476d190b85c5902a8b421097f14fa5b540c65fe674e34deac8000659bd89449c0dd6113a24b93bf4d8e369716c0df1d9fed6542a16bf321c893465b1dcbeb74ea44846837585e0145bf02956e4c8470e4eb16e11208b3fa8756ad8a0896789e51d79f52d66695a081f476fc6a56ab53abf796ab12a0602217cea168ac7e9aa8dda188892c4db29ec5c0f8bf4f48338ee414c54f3559d9f62", 0xd2}, {&(0x7f0000000540)="f021da6423ed547ad2accd5c111306a6ee23f8b44cc9ba115dba98cdc14c7bccef1d842f261cc6a71896da9670ca116a27778f5c44b9960a2947085d8284b2de3274e11f7dfff50c4b507cea4fef51c946b29ece67f3a6d3719d344e7c76f5e78940cfdb6bdd387d1b5727e27880ef6fb65ac5a82ce8458aaf9758ac9871598da4868c10bdf41e8d6c4aafce45ca99156d7fefb5a3142ea1d589e860ba5f5b326ceb9451f04861cd8d6e27c6e754c4b14085c6f850f617f0ac9be6eb444593872daa076edfe52abfbbef73e4d400e9520ca970ec", 0xd4}, {&(0x7f0000000640)="2ccda308980af5090a29858f4ddfe34421d5541c93b920ffa2f2561962d4255bd80a29f6538be01dda3472d1369af3ae36583ad6c558e2bb60f138abee501c11b41c666132d496e3c02348040a4ad047707c4935e5bf68135f2136b79293e16979a9b7a4581641c20d4dc141688cb4c68ecc97711e240d88699abc932ee54be325aa9ed4eedf4718b3a68639779c036596ff62c7356d5db66923f93f486a634f62845bfb3bb2c518090051d17af03d0dd6c081afebd5b11f579227e5f00def6825b69528dd26223a3b8df4b64b7eff4d407d5ff9cda0b28287fadeb004f333354b98dfd2e66129dd7139e361443f", 0xee}], 0x6, &(0x7f0000000780)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x3c, 0x117, 0x2, 0x2a, "797c50bdaea64511349f3c5eacd506420f95ed0dfa848c285086dffd71ed5f7a773777684cb5376e3895"}], 0x4c, 0x4080}, {0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x5c, 0x117, 0x2, 0x4c, "61bf57e4797e3ac2bb5ce958c2910cc9123e1b86c06a511c05aa658efd3ec9c43bf89b824c5661a97f9e260be1456dab69fb3e85e190b525ccb701d0f930aad808bae46a37d4e65fe2788b74"}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @iv={0x108, 0x117, 0x2, 0xf6, "3abd646200e432584aa944e3f758f570e3f0bb788c1e07fd4aeb6aa26833b99b670f100503e230604e8a3e54d3b5eeacdf098de079745802b7de96ea933f0c6253ece5ad860ba06d5d74c8fe1e2cac6d107cf290e4dad4736722ab4deace009d4f21afe4086929f8330bf78f918dfcf11cf0321b3c831b80f1204d61641079b60361ad47c03fee00951e4e4d287885d99499a73ed069b738142e59b351fa588d52f7c4fc1fbd8682a777fe067e39e055c29facc064a6e63766f3b9732689fd91ede165a5e0cfd880f4ad9f5f082cd74271865073564dafeea11ce2dde5fcb6d328bcac0190a2733e7b0470a3685a5a062fa2b2f942a2"}, @assoc={0x10, 0x117, 0x4, 0x6907}, @iv={0x1c, 0x117, 0x2, 0xc, "6943311193eac0ef5ec8997c"}], 0x11b0, 0x10}, {0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000019c0)="742cb7affbc7ef6d9c78ae90390e79a9c7db71b1b0858f6ae9abdab49cc8eb958d7a5c2351d8c32ee0b49470cd32a30fdb56170681d2fa139269993193ab948682b771ecf92d11887e03c04b669eabcbcc2f9cbe92a40ed323da34043bd69cbc2e67eb87", 0x64}, {&(0x7f0000001a40)="76b1b10e649cb5bbb68be44358b60e19b6a7050f693e048fe8fff0f49da33582edeba69a3db81a02dba64f46b43d852063f9657f1684b3d0a52a1f5de2e69a247de75e71984d1272c59b8145cfeb6587bdafc6e9496540a5e7db6449e132d534205201878b913ac23dbb6c05b89af1d9d39e97f7a5527b84ef8704ddaab005a4c64fdec82edeb4", 0x87}, {&(0x7f0000001b00)="61fffc4d40a0b72f23d6889e897b46e5bb40895bedd7230a2f2fe62f1132b7a9e72b2c45769538ed141d1b3e5223622e2f70a20e7fa0df1e18d0a8950a510729ef53433b02c0fbe2f92c5234ab885e1743399521780cb878f5697d63ecf53ecb66aec9e16a100144f790de5363e897356e97d0782e0c1ee429dd17359c2526fb823aa076184b9004912a82bd9e6c994c757883641962069b558c1b09ab6203b0fe0e21491146fee07b8b74112b822486f43a15b5dad54213dd6de8407de6db9cb9b0eaded8b615af039af4b4ce049313fde65548a169e96bf787283866d5c335298dc2660b69cec891d2f043ca4ef1976fbe0011", 0xf4}, {&(0x7f0000001c00)="979ab7b42cd422fbee8d82178a05c7447210436f14161b015f688889fadf2e821cd403a6611e7e28e544c36d609e5f5d747d857d951eb24e9a86cc28e2199f52e5eea5c08e7cce27d2d297cbfc14af4292185a7296c87e917ff53014c52c70cd65252b3de61e6b78bce0dcb5bf49cc6f3983f5ef23bc50696a8316aa90d1d8ad79f287c9eccc0db072a72048550799f5cabede7ae02031b3a157a68b7939472b449802f8b560ad48f0647cf9555f2df57035861fc69e32e5bb21eb084f5b99c402a0c7f113bdf74e5423b3ccb9c4aef9", 0xd0}, {&(0x7f0000001d00)="a9bfdd39144387401c56664f67c6be6837a970848f7756559c63625810ef7a60c62dc74ed5b32ac631f8e9f9547462ce8a0b45a5f540de23fb86318b3d3517b13c67fc7a4c1a4b6f69b2af83afa2e3a8918187dbb683a43873ef829dde48051d69e606055a8d2e26f64295beb15ffb0817b7585b6eba9f3f6719bced3de9dc94f83b136c552cb07d47d0a1dbfe215a463927a56f73f27ff27d5466e39ff03baec9c761645133fc6937a3976dd69e686925005573f95195af5b202609c5c1970ec51c102f3cdfe2492ec8f6e7b70d9a66748431275ba2f59be18e3935292571eb37a3", 0xe2}, {&(0x7f0000001e00)="8b2afa9d726217a5eadab2e90cbbdcfe4b6aebcc73605cddbc927f1a54fc542dbdebf32bfbc5e29223f95f1745e50335977d28b734a1f653f9f14025d51609d105efd9bab6c668f4657b966a7290cafed4c14c10423ee8d9d0ffd7e0b68e6a2cea7af3d8d65c739e1aa3fff2b94ed81706cb354e4168c533b33dd85c5f851aefb369fa8015586b08d5d02e56cfbcc93b831bf18c01ac64864231ec4be20649f3dd79a0508e5d8c85d8a191c0cd5d0e5ae2aec7084d98e54e0e64c95b4f42a7cedc7b09ec5d83e80073f4e210e845894995f76acad502f5e25424e6ff43b3a40e801ebe9275bf78efb366579c42ea38010f76ae464377387ad0670cfd3d03c2a750d209610efe079a4e50afd1550fb67ba568e0b9e73fd15129e0c9d6a65c25468162147c9e4b0dd6d0445b6ce762acc6d4dd33493395baac5101743f377798a58c3d09a1f07bcd3becfbeaf586835efa3681e92f19e3bbd929eb9b5c08a4758620bfca9b6bdb03ea7a97f0eb9dadddbe4f9d47ad9c85558fe6fc4cbfcff2621b9f46e78cb490cf8cf11b7481cde415924508065ee36e695b8336965c1d1d917c65494ce975fb00d8e911bcf89187fb8ad100742681199bc29c89ddf8bc47aa29a6521879b7d0488732b7f54be22bf82a7314eff86ffa613105915dc816ed9f1778bbedac5f94b454de5c3b9d579f225faec085d74e62fd62cb475e93afaf3f64b18cbe7ee71e765ad416a033a3ac76b52642505ec8f29ef7d6fd1a7633ba61ea780ea08351551670ba9205ca2c1a5676dc31be35a2a710cf6dde0a777d169f8ba91e0cfb3f1b4dc846b875f8705fd23a9a281f97db26a4f2add7338e334548ea24301f5b923189a6b3dcd5a717e4a3c1f00c8c3dfcc7b9bf7cfab245e7f1db9aaa43c843727f187889451492a4d227fa99c7fe1b2eabe3c97d32414998d6b61a811fc3bc244c62ced619a008ece81c663eb2598e275ed5d1d8c1f17286fbb4e605c5d94b83f5b8b6669c7b9646945fb0f5dca05ae27d03fbc40a1455d1fd1aac946d950451da03360134e72c85e02922326948ef58c41bf786cba81da3a192ffd84e101435dbe8d5035c072bf1be09211379940b17cc6c84bf9d71f0754b7b52302f2fade1b0f211ebb80d02bbbc04f6e1e2d9768546386a94a091487ed028d7949ac333f41a96c336c57b4c61b518ae0257644f7378951d2f52b6b2fb3307220da3892d96e2c0f3435ca9889eeac0ee5204ea069a6382b2867cb27b043c2b242304882a88099e8a03d8669aa893b8b078dd8cfcd82d2b697afd854c093c78b438a269ee96fbe6d0c56727c7ccf7d1ec9b6a4fdc9fe0258bba7175a9ad626e3d25084ec56a2b485068c9ac8f2064ba04834d7275d0d8849eb2b35b4b89a9b0fef7dc6855ebb209f417398ce13ae68f60b59acb7873ba36876d9890054a175d8f6c7e53beea599c050842c339a59f2b64ff4d75922ed09e845fe155c4739be8b0742bf24cdc5f549e3cb5e8531b6e76ef671f289ea842e2f8a3498123f05bd47cb2ce8f390a399b16c7d03de8e8a030d69719721296f17c620b95592bfba119c93bc0d64c6ee9d26933d086595f72e82d655e01512034da97f05dd2dc43ffd539fdf2883b5cb0d33c448c46df955ab20855e13a2ad298d80c680e50e3b1471f62ce84d9cc1725f57221f0f6f6abdb7712dd573a44143bed93a7f8f65b0c15e1f61cbbc6e10e2986d8688f198d8d50235e49b1454a8c24ebc54a1b0f9381fcfe64474c90e5f4e8510ee4c645001eb1a449c6f5f89600cf7b8726588224b8f00011807856f0c5d5880ca00da07ced677d9c41c50d7b1cc02a75c6f9b54a355985312ad998f887e6870421da789c59d24cde8c1485d4c9e05a19a8500bb951361a0a5dfc247979ab79e42c8b7606041a7d06e6fabee8fd263022e26feee1897b9f0825a72ea7ed7ec780bf12c14aea05c32c42d0cced19da6e9207a4c1fba5dac4185d940ce3021246c650fd608e9947f5b61cd6690d82941b68dcd6d5c4afbd3147a219152e44685c0ed2e45ab299c9f621b933d34d44ac4225c5d8a3f229b3fe85b56685d027d52e31f051809446cd0334fb06c2604490db0c551b0a1dcab8744763d1dcce532baeef9eb1b6b72739ac7642d44869132052cc0c69124e3c9666dcec2fe48f91e79f40ef4e204f1b8adc9c7bcf54f6d0ea61427e16b64dde5ba5a2a48f8a78a66410933f7288d6aeef5e097e9c4e69d10c8539b87d25014609d044bbf46a7186d3d57252353145a0e196cfa428759733af32e77cbc90c01d62a9e9853ab9a9419a2b3965a6a99481b5df9f559a3a5c788c03266215d634e6d3b53758351ca84c6e79aa47f0f8dc691bc92b388533b426e50be90fd12151e96dc4a885ab0f74471eabe2391abfbd64e093c961152bac20c1cb67a42b0f5653b29231e2907f4236171676f64b31026411e163e3b7b8a505026d1f8ec22ec4931b07002783421e1118cd20999bfa9f787dc1ca299dfbae662c3717fdee9567ff479b7afb1ca05f8f089273bc0260be2ab4a843332674f9cb7f7a4738e5aa2c64fd80f85742b0631f56c3c9d297a3449e02baee54ead9179c912a5aaf4e0509d2ad53a5550f814351231a6900fd7d43b2ea53973ab48a6a40025afbcbd559ea35a0f21747fb193a6cbcbcd3f41d397d289afeeaaf92b5d5696b0ff1331af0dfee07e60978ee93c142ff902501dab1300733b1424cde0ae688a78722fb52aa4a13842526285cffac5f9fc9377585d8266b6774aba243930d9a78418e5227fc483804e8b8718fbd192be7428b7a6576f95c16dfd501ae7d991ca5a91e1ab747d6dd292a3ef8ef9abbb84bc8bd1dee50c80b89d223d79091c4b32d81aaf66e60aa5daac464e43ecc4017c23b0afb57a12e30f56855aecf69e40cd22e574c5ff5897229395daab9f79bcffab06a98b879f1fa68317cfe1aa3f5f4fa6318e4dcb56efd12491dc030b82d434b81c80c65062d437e2396799d789564a3ef26d3134cb9da19c63fc61e431c51df42494aeb247574113d6ee69cf1e925ceff3ae9ab6a18d8cd3da27a3a0a5c3a7aff4e63bcf09fce4c1065a6c75764cdc73948a227dbf839d8776c36b64f91ba5d19da572c974a2baa53ca4f9df3325c928746f30546f5881451f9e55cedd5a7c6b1a634fcbb7dfe18a33e53abeb36a52e0ea4a051995ccd124e380a1e57ca07964ff10e1394b1f2a65562c42ba3c0a0c335d78e3f3f3a35d03157cee604d9e35f0fbac5b52bc48af17325790feaec02e22adf350baef4e1c3264ae62e11a0fb234825a37d62599a538c1c15635ffc9d3c193f2dc77d0c0c016859ff4038b40ec11afcb4df7c2debbedd72bbbcde1f597b627eb7a1cc0574dff91fb21afd079df617ac2933d2766e825cfa663a170f9ccc267a2ef5188972f40995b097ff1140e998d1d28df0081a93bb928d5352a7ee64d5ae9d69c6c24c22f16574280aa988e8313a461f6b8ee28d6fb120c1218f931459e5afb117cdeb1dc19ac569d860ef18657b632c826e9086ff008b9b315641b6b7e4c124dba984e5221b2de66d2e3636540f7e5281a1907e549a171404df718fb84a44b85da73517cd7ebec3d803606afbaa5d6665aba1aa7bd49b62f39f5124ed62e2c1fe64c873aae4b5362815d4456ea444ab050b0bc19827f964c72d45a54163dcea543f83c492850caf1e184866f9372e7e8f8896de243fe99105ece1906c116a1489dad7af22c1b187fcf5e294855ed658cffdfadc35a7ee1bfe09dacc4e630b1ebd449fa7e006b35ed6e6094d37bf33a7e612f1a47108af538cf30ca4017dae88fbed1b64b07cc3468195f26f2de113a396094170b86b02edbd6e4c770f054e92d945a7a9cd35d064dd726ed55ea4d0d4268bde298ba736b752fd2fef534f27ce445b3bce29793b96f76bd040051ba0b1c4a9f5954ac8e2844b3bf66f7ff6365a4aba7907eb8a5066a6be3d8b691077dc03885188e11d1bb2f63495e7b0eeafa35ceebff2a3613088379b6503ca225e9d3ffc7c6bb1fd90a06ccd44e2ea0ef5de08d21d59f9a345502ecec494964f76719c47e5d92756b1af70bfdb7d3d87776db8c559c736f326ee6ae84cf14a31c696d813cb4ad59cd19c74ffd80c73ba6a844db1c021271bd5ffbbfa2d22f1f1e16d7757982cc4f569125a7422238c6486b0b4f3145afd7149e8089bb527a1b65c2bb5e6acf9d76b38a265da1055ede582e0a90be93a8f6a8500f55b6564233839200947c704a33370e873793f95508c99e85e9880e8be3b3e35c893e7c7c126dd18d75feef761b7cd8e3ee6d0a5eea385667410cce7fabef1ed2dd32327aac516a1e92c47e8b90c4b72f639d3977019c18ea9eea51323a786f413e64dfb63131b3211ed75bef32ffc62df78521ce88b473947c4e19e87dee4fdcea20399f26860767f985071f310b84a30a05d7ddfda08d319d15eb357e61a89b3d029d7289aeedc185a6fd49cd2561a8dbc0c3a532cf3c5faa186762f8ad3fab1484446b0b8666f8f58725949207f9c2d009f6e85cedc36adfb1c2ab2d0a5882aa3da1c5abae315394bd23899e6024ed5ea2b21380bcae6058d96cfbb88f23597476f95b4c43d51dda4e71ee17d86840acf28b4c82f56f765a9efa80a579246ce7cc67654833480fb4f3cf1f16e8fcb29d437e9456faed906f3c39f7424fd4e233055fe8602461c70b6818453fdabaf5b7a4b322df857f0e690d6151e897129e4650f313c41eee71a881731ba595ed9f243d5a04a8be1608d4dbc9e382fc6f4ceb0b95738893d0be33d592c6769633038c412828f28c3ab31f9a03cfc44775e096d2cc78d57b60b5c6b5a40d0739811bd49b8dac5d83e4bcbd84c1236cd5b8db5f2bfd75cb1ca33c1760d3874bf2b40c8f62b2f55a6966e41adb16cfd8e71ad6bf19536bdfb40787d93d4438063801548062018a4d1289bda9212092cc0d56d3721db7653fea2a3f9d1d86b6b8d2466347053e2501e488a039ec50f39b77c417e37f11aa5a99dce4efdd5b39d746aedbbf1a053dbda34e9740faa39623b569767defbd89fa19b63c0b2ec9a0aacc66229348643e309e2ef2759f010efd8fda00ac1df6f6a67196138ae9479488e71e4a324fa5fbed62a4c809b71d66df98f266cd90a96c628a3b8c07c451d5505bd04db9f56a8fabdefb21caf2554ea585691045cecbd48a6caacd879e1594848b66d97dc059de04ee660fa017e7de85767acf70b441ceee10a503840974042332f3b06070fa763a3eb12f7a315941758bdf9e2cc8f1d98b51c1607921fa57db5d9a14ec96e7410c6cf594adc462c299bec33e672dd49b292ae41f54967afdc82db6229445b2fa246c39c44804707f63e87d6af79b7049bb68dd8e275f80e30b953aa421ea576e982e04ac96b27878342fd9490950efa0dbfef6d344648442065892b8192ff33e46987a0f05682a823fde15ea998ca3b07215bc0940f78d18e755d076f3275a79ec15e7f0a27569fd0dad540616a9b4ee2f256259cbc8c6244fcc5b8fba4c250067401a9ab831bb9415254e035309dddaa41da60689d3478519607b20c4f8e1ab6a097b13dae8e00e3ba729bd2a70e41decf3600e8123339d7463059efcdab8fa7cf42989ef5dfcf6f0828fdebbf5f4830a0aece4f51cf7cfe7b89f5bef54f1f465b614e0fa7ce1ceaf414e20e7a90fcccc7d12bc4a51d179fc2acaa7c9f4ca321f1de7a19425c9d7c37109054e91cb7e16d7a851352b9bbc7217e4fcddba80cab3125cf8694e2f59da1", 0x1000}], 0x6, &(0x7f0000002e40)=[@assoc={0x10, 0x117, 0x4, 0x100}], 0x10, 0x20044081}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e80)="c14c5d085232870c8172c8c2ee35476415cefd7b1b5950ab5e5f591eb1880bb7db3e614d1b503b8fad7de0dbf4143ac8913202bd772816dcca3546f6ef9d9a932c97f67d61f1a1d8c25c981e266608b57d15bc7481e68d3101ba58ae23514e361274ebbef982d001cf5fd227d78f549f15c0cc06cc17091bb69b59e8a033676c9c32fa6371b74b880215e31235d42c0d039c42675a062052ca7e74a5bad5550c8d51abb397c6100739c7f1011764a162acbf1418714bb227cc2d4323056e076fa3b5c1bb3a852b4117bab0829fd1ab721698", 0xd2}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002fc0)="841b611b5df840c2c7482d61a53a5fab7742b589", 0x14}, {&(0x7f0000003000)="294183463a24cbd843d7373eb779f960457b77501367f62bf7df58fc06a88cab99f6245102bad0b82dbc1e138f860216d1e7298ed358684f6bdcb5f9f9e4d7369e30865918a5685e3711cf582640fcca36178410117e8b175527c615bf962a62cb7942c8", 0x64}, {&(0x7f0000003080)="422347665f15e0f77ca3414ec510322a3c99ae56a645ea925dbae04f0cf7b672f8b26595017f5b1be8bf6e2eb87328bc2d9cf9206841f54a6ae6b9f53486309d54", 0x41}, {&(0x7f0000003100)="42343a1f129ce081ba67b2edf7", 0xd}], 0x4, 0x0, 0x0, 0x4058}], 0x6, 0x40080) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x7f, 0x40080) sendmmsg$alg(r1, &(0x7f0000003180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="7fe513c3e103ce1f61234b864843b2d25c1ef612f483d1f5a4393470f82ea8cd941ef622be8dc9f500b0e0160f7c876997f1c6a293a97c52f8a2a9280340bac40a6dda6ea209a9c86a74453b20132cf606a87028af4737c37b3b1d33856668f06977b2866cd912b4b89ea95ad4aebe4e07ec7224520394cb1136b83e38d5c5626dca7742c0ba921a3c8cc04111672fbaef6fc83b1a3428611a7bf26de48fd1621f122a9cfdc1f211c62021987ab7a9786e4b465e437e86d41720ae938b51720ac708930cd47198dd5f78b925dedf5e594a5192992e870a66966e98706bade5d5553bb489b27c6971e1c551a9337d", 0xee}], 0x1, &(0x7f0000000180)=[@iv={0x2c, 0x117, 0x2, 0x1b, "acaba66e548f2bfc7d652e23e3ebfb2a1eae03b50349e2e38e3595"}, @iv={0xdc, 0x117, 0x2, 0xca, "309a4f69a53687f8274db158ab634b425b088cfc0805c7c652baceeaf6ebee5a59ade2e733749b15a62ff76fc3e39463f3ccb5cd4610da89dedf8fbafdf7a09e23681ce4e55ddb3137b07349eb6b1eda04a08eacee7c2f088ca111afc5c11b74c5f0ec74ebca6cdc974a5cebafa947c027a337afa66bd456ccb6411d8f5dfec1cd034ef903b6d18b6af089c58476dc9c1e9bf8dad74854c271c1f9ecd60f26472f97dd77388b58c40c91b5ee67130669a56d963b2e6d5b9114c1542e2dad3d05506afe1c958bd3e70746"}], 0x108, 0x40000}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="633beaf8e0d0156725322c5e77", 0xd}, {&(0x7f0000000300)="4fc3a77e6b824f02792843ff6f63f639431006b5373a7cdbd3ea3a99a772a76517706564313897045422a698d7dc0e4dde5258945874e73308e7842494d0b3d776a22fafeceac3babee9e32aa984a86aa2f18cb7ff82b8dbcb52792a9780bf8196327761f4c0cba97dddb362046cea03478027b880f4251c478914ecf92460a293b5647885d0b97c5ae01196837db66aec7a4cf2a7c7e355469a0e63ba4cb3019f0d7d7fd0f7fce29acad92f6f0df7c26e2a16c78a04b6bc8a1e4cc5cde32f9d538471", 0xc3}, {&(0x7f0000000400)="61dd3f86d8cd9c71f02cf029011fe040743c6fff788ef8712a0640a314cf4c971a909b77b5481025", 0x28}, {&(0x7f0000000440)="17932919aefd05825e64fd3273072828de2e57dc6fa27786375cc85c3912db8a6fe53ff8222cc871c56fa242ede9cb5164bf9a4188ad87a2dc7e476d190b85c5902a8b421097f14fa5b540c65fe674e34deac8000659bd89449c0dd6113a24b93bf4d8e369716c0df1d9fed6542a16bf321c893465b1dcbeb74ea44846837585e0145bf02956e4c8470e4eb16e11208b3fa8756ad8a0896789e51d79f52d66695a081f476fc6a56ab53abf796ab12a0602217cea168ac7e9aa8dda188892c4db29ec5c0f8bf4f48338ee414c54f3559d9f62", 0xd2}, {&(0x7f0000000540)="f021da6423ed547ad2accd5c111306a6ee23f8b44cc9ba115dba98cdc14c7bccef1d842f261cc6a71896da9670ca116a27778f5c44b9960a2947085d8284b2de3274e11f7dfff50c4b507cea4fef51c946b29ece67f3a6d3719d344e7c76f5e78940cfdb6bdd387d1b5727e27880ef6fb65ac5a82ce8458aaf9758ac9871598da4868c10bdf41e8d6c4aafce45ca99156d7fefb5a3142ea1d589e860ba5f5b326ceb9451f04861cd8d6e27c6e754c4b14085c6f850f617f0ac9be6eb444593872daa076edfe52abfbbef73e4d400e9520ca970ec", 0xd4}, {&(0x7f0000000640)="2ccda308980af5090a29858f4ddfe34421d5541c93b920ffa2f2561962d4255bd80a29f6538be01dda3472d1369af3ae36583ad6c558e2bb60f138abee501c11b41c666132d496e3c02348040a4ad047707c4935e5bf68135f2136b79293e16979a9b7a4581641c20d4dc141688cb4c68ecc97711e240d88699abc932ee54be325aa9ed4eedf4718b3a68639779c036596ff62c7356d5db66923f93f486a634f62845bfb3bb2c518090051d17af03d0dd6c081afebd5b11f579227e5f00def6825b69528dd26223a3b8df4b64b7eff4d407d5ff9cda0b28287fadeb004f333354b98dfd2e66129dd7139e361443f", 0xee}], 0x6, &(0x7f0000000780)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x3c, 0x117, 0x2, 0x2a, "797c50bdaea64511349f3c5eacd506420f95ed0dfa848c285086dffd71ed5f7a773777684cb5376e3895"}], 0x4c, 0x4080}, {0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x5c, 0x117, 0x2, 0x4c, "61bf57e4797e3ac2bb5ce958c2910cc9123e1b86c06a511c05aa658efd3ec9c43bf89b824c5661a97f9e260be1456dab69fb3e85e190b525ccb701d0f930aad808bae46a37d4e65fe2788b74"}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @iv={0x108, 0x117, 0x2, 0xf6, "3abd646200e432584aa944e3f758f570e3f0bb788c1e07fd4aeb6aa26833b99b670f100503e230604e8a3e54d3b5eeacdf098de079745802b7de96ea933f0c6253ece5ad860ba06d5d74c8fe1e2cac6d107cf290e4dad4736722ab4deace009d4f21afe4086929f8330bf78f918dfcf11cf0321b3c831b80f1204d61641079b60361ad47c03fee00951e4e4d287885d99499a73ed069b738142e59b351fa588d52f7c4fc1fbd8682a777fe067e39e055c29facc064a6e63766f3b9732689fd91ede165a5e0cfd880f4ad9f5f082cd74271865073564dafeea11ce2dde5fcb6d328bcac0190a2733e7b0470a3685a5a062fa2b2f942a2"}, @assoc={0x10, 0x117, 0x4, 0x6907}, @iv={0x1c, 0x117, 0x2, 0xc, "6943311193eac0ef5ec8997c"}], 0x11b0, 0x10}, {0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000019c0)="742cb7affbc7ef6d9c78ae90390e79a9c7db71b1b0858f6ae9abdab49cc8eb958d7a5c2351d8c32ee0b49470cd32a30fdb56170681d2fa139269993193ab948682b771ecf92d11887e03c04b669eabcbcc2f9cbe92a40ed323da34043bd69cbc2e67eb87", 0x64}, {&(0x7f0000001a40)="76b1b10e649cb5bbb68be44358b60e19b6a7050f693e048fe8fff0f49da33582edeba69a3db81a02dba64f46b43d852063f9657f1684b3d0a52a1f5de2e69a247de75e71984d1272c59b8145cfeb6587bdafc6e9496540a5e7db6449e132d534205201878b913ac23dbb6c05b89af1d9d39e97f7a5527b84ef8704ddaab005a4c64fdec82edeb4", 0x87}, {&(0x7f0000001b00)="61fffc4d40a0b72f23d6889e897b46e5bb40895bedd7230a2f2fe62f1132b7a9e72b2c45769538ed141d1b3e5223622e2f70a20e7fa0df1e18d0a8950a510729ef53433b02c0fbe2f92c5234ab885e1743399521780cb878f5697d63ecf53ecb66aec9e16a100144f790de5363e897356e97d0782e0c1ee429dd17359c2526fb823aa076184b9004912a82bd9e6c994c757883641962069b558c1b09ab6203b0fe0e21491146fee07b8b74112b822486f43a15b5dad54213dd6de8407de6db9cb9b0eaded8b615af039af4b4ce049313fde65548a169e96bf787283866d5c335298dc2660b69cec891d2f043ca4ef1976fbe0011", 0xf4}, {&(0x7f0000001c00)="979ab7b42cd422fbee8d82178a05c7447210436f14161b015f688889fadf2e821cd403a6611e7e28e544c36d609e5f5d747d857d951eb24e9a86cc28e2199f52e5eea5c08e7cce27d2d297cbfc14af4292185a7296c87e917ff53014c52c70cd65252b3de61e6b78bce0dcb5bf49cc6f3983f5ef23bc50696a8316aa90d1d8ad79f287c9eccc0db072a72048550799f5cabede7ae02031b3a157a68b7939472b449802f8b560ad48f0647cf9555f2df57035861fc69e32e5bb21eb084f5b99c402a0c7f113bdf74e5423b3ccb9c4aef9", 0xd0}, {&(0x7f0000001d00)="a9bfdd39144387401c56664f67c6be6837a970848f7756559c63625810ef7a60c62dc74ed5b32ac631f8e9f9547462ce8a0b45a5f540de23fb86318b3d3517b13c67fc7a4c1a4b6f69b2af83afa2e3a8918187dbb683a43873ef829dde48051d69e606055a8d2e26f64295beb15ffb0817b7585b6eba9f3f6719bced3de9dc94f83b136c552cb07d47d0a1dbfe215a463927a56f73f27ff27d5466e39ff03baec9c761645133fc6937a3976dd69e686925005573f95195af5b202609c5c1970ec51c102f3cdfe2492ec8f6e7b70d9a66748431275ba2f59be18e3935292571eb37a3", 0xe2}, {&(0x7f0000001e00)="8b2afa9d726217a5eadab2e90cbbdcfe4b6aebcc73605cddbc927f1a54fc542dbdebf32bfbc5e29223f95f1745e50335977d28b734a1f653f9f14025d51609d105efd9bab6c668f4657b966a7290cafed4c14c10423ee8d9d0ffd7e0b68e6a2cea7af3d8d65c739e1aa3fff2b94ed81706cb354e4168c533b33dd85c5f851aefb369fa8015586b08d5d02e56cfbcc93b831bf18c01ac64864231ec4be20649f3dd79a0508e5d8c85d8a191c0cd5d0e5ae2aec7084d98e54e0e64c95b4f42a7cedc7b09ec5d83e80073f4e210e845894995f76acad502f5e25424e6ff43b3a40e801ebe9275bf78efb366579c42ea38010f76ae464377387ad0670cfd3d03c2a750d209610efe079a4e50afd1550fb67ba568e0b9e73fd15129e0c9d6a65c25468162147c9e4b0dd6d0445b6ce762acc6d4dd33493395baac5101743f377798a58c3d09a1f07bcd3becfbeaf586835efa3681e92f19e3bbd929eb9b5c08a4758620bfca9b6bdb03ea7a97f0eb9dadddbe4f9d47ad9c85558fe6fc4cbfcff2621b9f46e78cb490cf8cf11b7481cde415924508065ee36e695b8336965c1d1d917c65494ce975fb00d8e911bcf89187fb8ad100742681199bc29c89ddf8bc47aa29a6521879b7d0488732b7f54be22bf82a7314eff86ffa613105915dc816ed9f1778bbedac5f94b454de5c3b9d579f225faec085d74e62fd62cb475e93afaf3f64b18cbe7ee71e765ad416a033a3ac76b52642505ec8f29ef7d6fd1a7633ba61ea780ea08351551670ba9205ca2c1a5676dc31be35a2a710cf6dde0a777d169f8ba91e0cfb3f1b4dc846b875f8705fd23a9a281f97db26a4f2add7338e334548ea24301f5b923189a6b3dcd5a717e4a3c1f00c8c3dfcc7b9bf7cfab245e7f1db9aaa43c843727f187889451492a4d227fa99c7fe1b2eabe3c97d32414998d6b61a811fc3bc244c62ced619a008ece81c663eb2598e275ed5d1d8c1f17286fbb4e605c5d94b83f5b8b6669c7b9646945fb0f5dca05ae27d03fbc40a1455d1fd1aac946d950451da03360134e72c85e02922326948ef58c41bf786cba81da3a192ffd84e101435dbe8d5035c072bf1be09211379940b17cc6c84bf9d71f0754b7b52302f2fade1b0f211ebb80d02bbbc04f6e1e2d9768546386a94a091487ed028d7949ac333f41a96c336c57b4c61b518ae0257644f7378951d2f52b6b2fb3307220da3892d96e2c0f3435ca9889eeac0ee5204ea069a6382b2867cb27b043c2b242304882a88099e8a03d8669aa893b8b078dd8cfcd82d2b697afd854c093c78b438a269ee96fbe6d0c56727c7ccf7d1ec9b6a4fdc9fe0258bba7175a9ad626e3d25084ec56a2b485068c9ac8f2064ba04834d7275d0d8849eb2b35b4b89a9b0fef7dc6855ebb209f417398ce13ae68f60b59acb7873ba36876d9890054a175d8f6c7e53beea599c050842c339a59f2b64ff4d75922ed09e845fe155c4739be8b0742bf24cdc5f549e3cb5e8531b6e76ef671f289ea842e2f8a3498123f05bd47cb2ce8f390a399b16c7d03de8e8a030d69719721296f17c620b95592bfba119c93bc0d64c6ee9d26933d086595f72e82d655e01512034da97f05dd2dc43ffd539fdf2883b5cb0d33c448c46df955ab20855e13a2ad298d80c680e50e3b1471f62ce84d9cc1725f57221f0f6f6abdb7712dd573a44143bed93a7f8f65b0c15e1f61cbbc6e10e2986d8688f198d8d50235e49b1454a8c24ebc54a1b0f9381fcfe64474c90e5f4e8510ee4c645001eb1a449c6f5f89600cf7b8726588224b8f00011807856f0c5d5880ca00da07ced677d9c41c50d7b1cc02a75c6f9b54a355985312ad998f887e6870421da789c59d24cde8c1485d4c9e05a19a8500bb951361a0a5dfc247979ab79e42c8b7606041a7d06e6fabee8fd263022e26feee1897b9f0825a72ea7ed7ec780bf12c14aea05c32c42d0cced19da6e9207a4c1fba5dac4185d940ce3021246c650fd608e9947f5b61cd6690d82941b68dcd6d5c4afbd3147a219152e44685c0ed2e45ab299c9f621b933d34d44ac4225c5d8a3f229b3fe85b56685d027d52e31f051809446cd0334fb06c2604490db0c551b0a1dcab8744763d1dcce532baeef9eb1b6b72739ac7642d44869132052cc0c69124e3c9666dcec2fe48f91e79f40ef4e204f1b8adc9c7bcf54f6d0ea61427e16b64dde5ba5a2a48f8a78a66410933f7288d6aeef5e097e9c4e69d10c8539b87d25014609d044bbf46a7186d3d57252353145a0e196cfa428759733af32e77cbc90c01d62a9e9853ab9a9419a2b3965a6a99481b5df9f559a3a5c788c03266215d634e6d3b53758351ca84c6e79aa47f0f8dc691bc92b388533b426e50be90fd12151e96dc4a885ab0f74471eabe2391abfbd64e093c961152bac20c1cb67a42b0f5653b29231e2907f4236171676f64b31026411e163e3b7b8a505026d1f8ec22ec4931b07002783421e1118cd20999bfa9f787dc1ca299dfbae662c3717fdee9567ff479b7afb1ca05f8f089273bc0260be2ab4a843332674f9cb7f7a4738e5aa2c64fd80f85742b0631f56c3c9d297a3449e02baee54ead9179c912a5aaf4e0509d2ad53a5550f814351231a6900fd7d43b2ea53973ab48a6a40025afbcbd559ea35a0f21747fb193a6cbcbcd3f41d397d289afeeaaf92b5d5696b0ff1331af0dfee07e60978ee93c142ff902501dab1300733b1424cde0ae688a78722fb52aa4a13842526285cffac5f9fc9377585d8266b6774aba243930d9a78418e5227fc483804e8b8718fbd192be7428b7a6576f95c16dfd501ae7d991ca5a91e1ab747d6dd292a3ef8ef9abbb84bc8bd1dee50c80b89d223d79091c4b32d81aaf66e60aa5daac464e43ecc4017c23b0afb57a12e30f56855aecf69e40cd22e574c5ff5897229395daab9f79bcffab06a98b879f1fa68317cfe1aa3f5f4fa6318e4dcb56efd12491dc030b82d434b81c80c65062d437e2396799d789564a3ef26d3134cb9da19c63fc61e431c51df42494aeb247574113d6ee69cf1e925ceff3ae9ab6a18d8cd3da27a3a0a5c3a7aff4e63bcf09fce4c1065a6c75764cdc73948a227dbf839d8776c36b64f91ba5d19da572c974a2baa53ca4f9df3325c928746f30546f5881451f9e55cedd5a7c6b1a634fcbb7dfe18a33e53abeb36a52e0ea4a051995ccd124e380a1e57ca07964ff10e1394b1f2a65562c42ba3c0a0c335d78e3f3f3a35d03157cee604d9e35f0fbac5b52bc48af17325790feaec02e22adf350baef4e1c3264ae62e11a0fb234825a37d62599a538c1c15635ffc9d3c193f2dc77d0c0c016859ff4038b40ec11afcb4df7c2debbedd72bbbcde1f597b627eb7a1cc0574dff91fb21afd079df617ac2933d2766e825cfa663a170f9ccc267a2ef5188972f40995b097ff1140e998d1d28df0081a93bb928d5352a7ee64d5ae9d69c6c24c22f16574280aa988e8313a461f6b8ee28d6fb120c1218f931459e5afb117cdeb1dc19ac569d860ef18657b632c826e9086ff008b9b315641b6b7e4c124dba984e5221b2de66d2e3636540f7e5281a1907e549a171404df718fb84a44b85da73517cd7ebec3d803606afbaa5d6665aba1aa7bd49b62f39f5124ed62e2c1fe64c873aae4b5362815d4456ea444ab050b0bc19827f964c72d45a54163dcea543f83c492850caf1e184866f9372e7e8f8896de243fe99105ece1906c116a1489dad7af22c1b187fcf5e294855ed658cffdfadc35a7ee1bfe09dacc4e630b1ebd449fa7e006b35ed6e6094d37bf33a7e612f1a47108af538cf30ca4017dae88fbed1b64b07cc3468195f26f2de113a396094170b86b02edbd6e4c770f054e92d945a7a9cd35d064dd726ed55ea4d0d4268bde298ba736b752fd2fef534f27ce445b3bce29793b96f76bd040051ba0b1c4a9f5954ac8e2844b3bf66f7ff6365a4aba7907eb8a5066a6be3d8b691077dc03885188e11d1bb2f63495e7b0eeafa35ceebff2a3613088379b6503ca225e9d3ffc7c6bb1fd90a06ccd44e2ea0ef5de08d21d59f9a345502ecec494964f76719c47e5d92756b1af70bfdb7d3d87776db8c559c736f326ee6ae84cf14a31c696d813cb4ad59cd19c74ffd80c73ba6a844db1c021271bd5ffbbfa2d22f1f1e16d7757982cc4f569125a7422238c6486b0b4f3145afd7149e8089bb527a1b65c2bb5e6acf9d76b38a265da1055ede582e0a90be93a8f6a8500f55b6564233839200947c704a33370e873793f95508c99e85e9880e8be3b3e35c893e7c7c126dd18d75feef761b7cd8e3ee6d0a5eea385667410cce7fabef1ed2dd32327aac516a1e92c47e8b90c4b72f639d3977019c18ea9eea51323a786f413e64dfb63131b3211ed75bef32ffc62df78521ce88b473947c4e19e87dee4fdcea20399f26860767f985071f310b84a30a05d7ddfda08d319d15eb357e61a89b3d029d7289aeedc185a6fd49cd2561a8dbc0c3a532cf3c5faa186762f8ad3fab1484446b0b8666f8f58725949207f9c2d009f6e85cedc36adfb1c2ab2d0a5882aa3da1c5abae315394bd23899e6024ed5ea2b21380bcae6058d96cfbb88f23597476f95b4c43d51dda4e71ee17d86840acf28b4c82f56f765a9efa80a579246ce7cc67654833480fb4f3cf1f16e8fcb29d437e9456faed906f3c39f7424fd4e233055fe8602461c70b6818453fdabaf5b7a4b322df857f0e690d6151e897129e4650f313c41eee71a881731ba595ed9f243d5a04a8be1608d4dbc9e382fc6f4ceb0b95738893d0be33d592c6769633038c412828f28c3ab31f9a03cfc44775e096d2cc78d57b60b5c6b5a40d0739811bd49b8dac5d83e4bcbd84c1236cd5b8db5f2bfd75cb1ca33c1760d3874bf2b40c8f62b2f55a6966e41adb16cfd8e71ad6bf19536bdfb40787d93d4438063801548062018a4d1289bda9212092cc0d56d3721db7653fea2a3f9d1d86b6b8d2466347053e2501e488a039ec50f39b77c417e37f11aa5a99dce4efdd5b39d746aedbbf1a053dbda34e9740faa39623b569767defbd89fa19b63c0b2ec9a0aacc66229348643e309e2ef2759f010efd8fda00ac1df6f6a67196138ae9479488e71e4a324fa5fbed62a4c809b71d66df98f266cd90a96c628a3b8c07c451d5505bd04db9f56a8fabdefb21caf2554ea585691045cecbd48a6caacd879e1594848b66d97dc059de04ee660fa017e7de85767acf70b441ceee10a503840974042332f3b06070fa763a3eb12f7a315941758bdf9e2cc8f1d98b51c1607921fa57db5d9a14ec96e7410c6cf594adc462c299bec33e672dd49b292ae41f54967afdc82db6229445b2fa246c39c44804707f63e87d6af79b7049bb68dd8e275f80e30b953aa421ea576e982e04ac96b27878342fd9490950efa0dbfef6d344648442065892b8192ff33e46987a0f05682a823fde15ea998ca3b07215bc0940f78d18e755d076f3275a79ec15e7f0a27569fd0dad540616a9b4ee2f256259cbc8c6244fcc5b8fba4c250067401a9ab831bb9415254e035309dddaa41da60689d3478519607b20c4f8e1ab6a097b13dae8e00e3ba729bd2a70e41decf3600e8123339d7463059efcdab8fa7cf42989ef5dfcf6f0828fdebbf5f4830a0aece4f51cf7cfe7b89f5bef54f1f465b614e0fa7ce1ceaf414e20e7a90fcccc7d12bc4a51d179fc2acaa7c9f4ca321f1de7a19425c9d7c37109054e91cb7e16d7a851352b9bbc7217e4fcddba80cab3125cf8694e2f59da1", 0x1000}], 0x6, &(0x7f0000002e40)=[@assoc={0x10, 0x117, 0x4, 0x100}], 0x10, 0x20044081}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e80)="c14c5d085232870c8172c8c2ee35476415cefd7b1b5950ab5e5f591eb1880bb7db3e614d1b503b8fad7de0dbf4143ac8913202bd772816dcca3546f6ef9d9a932c97f67d61f1a1d8c25c981e266608b57d15bc7481e68d3101ba58ae23514e361274ebbef982d001cf5fd227d78f549f15c0cc06cc17091bb69b59e8a033676c9c32fa6371b74b880215e31235d42c0d039c42675a062052ca7e74a5bad5550c8d51abb397c6100739c7f1011764a162acbf1418714bb227cc2d4323056e076fa3b5c1bb3a852b4117bab0829fd1ab721698", 0xd2}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002fc0)="841b611b5df840c2c7482d61a53a5fab7742b589", 0x14}, {&(0x7f0000003000)="294183463a24cbd843d7373eb779f960457b77501367f62bf7df58fc06a88cab99f6245102bad0b82dbc1e138f860216d1e7298ed358684f6bdcb5f9f9e4d7369e30865918a5685e3711cf582640fcca36178410117e8b175527c615bf962a62cb7942c8", 0x64}, {&(0x7f0000003080)="422347665f15e0f77ca3414ec510322a3c99ae56a645ea925dbae04f0cf7b672f8b26595017f5b1be8bf6e2eb87328bc2d9cf9206841f54a6ae6b9f53486309d54", 0x41}, {&(0x7f0000003100)="42343a1f129ce081ba67b2edf7", 0xd}], 0x4, 0x0, 0x0, 0x4058}], 0x6, 0x40080) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x66, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x10, "608523b0bc0676ed82f4cb2de67a"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x7f, 0x40080) sendmmsg$alg(r1, &(0x7f0000003180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="7fe513c3e103ce1f61234b864843b2d25c1ef612f483d1f5a4393470f82ea8cd941ef622be8dc9f500b0e0160f7c876997f1c6a293a97c52f8a2a9280340bac40a6dda6ea209a9c86a74453b20132cf606a87028af4737c37b3b1d33856668f06977b2866cd912b4b89ea95ad4aebe4e07ec7224520394cb1136b83e38d5c5626dca7742c0ba921a3c8cc04111672fbaef6fc83b1a3428611a7bf26de48fd1621f122a9cfdc1f211c62021987ab7a9786e4b465e437e86d41720ae938b51720ac708930cd47198dd5f78b925dedf5e594a5192992e870a66966e98706bade5d5553bb489b27c6971e1c551a9337d", 0xee}], 0x1, &(0x7f0000000180)=[@iv={0x2c, 0x117, 0x2, 0x1b, "acaba66e548f2bfc7d652e23e3ebfb2a1eae03b50349e2e38e3595"}, @iv={0xdc, 0x117, 0x2, 0xca, "309a4f69a53687f8274db158ab634b425b088cfc0805c7c652baceeaf6ebee5a59ade2e733749b15a62ff76fc3e39463f3ccb5cd4610da89dedf8fbafdf7a09e23681ce4e55ddb3137b07349eb6b1eda04a08eacee7c2f088ca111afc5c11b74c5f0ec74ebca6cdc974a5cebafa947c027a337afa66bd456ccb6411d8f5dfec1cd034ef903b6d18b6af089c58476dc9c1e9bf8dad74854c271c1f9ecd60f26472f97dd77388b58c40c91b5ee67130669a56d963b2e6d5b9114c1542e2dad3d05506afe1c958bd3e70746"}], 0x108, 0x40000}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="633beaf8e0d0156725322c5e77", 0xd}, {&(0x7f0000000300)="4fc3a77e6b824f02792843ff6f63f639431006b5373a7cdbd3ea3a99a772a76517706564313897045422a698d7dc0e4dde5258945874e73308e7842494d0b3d776a22fafeceac3babee9e32aa984a86aa2f18cb7ff82b8dbcb52792a9780bf8196327761f4c0cba97dddb362046cea03478027b880f4251c478914ecf92460a293b5647885d0b97c5ae01196837db66aec7a4cf2a7c7e355469a0e63ba4cb3019f0d7d7fd0f7fce29acad92f6f0df7c26e2a16c78a04b6bc8a1e4cc5cde32f9d538471", 0xc3}, {&(0x7f0000000400)="61dd3f86d8cd9c71f02cf029011fe040743c6fff788ef8712a0640a314cf4c971a909b77b5481025", 0x28}, {&(0x7f0000000440)="17932919aefd05825e64fd3273072828de2e57dc6fa27786375cc85c3912db8a6fe53ff8222cc871c56fa242ede9cb5164bf9a4188ad87a2dc7e476d190b85c5902a8b421097f14fa5b540c65fe674e34deac8000659bd89449c0dd6113a24b93bf4d8e369716c0df1d9fed6542a16bf321c893465b1dcbeb74ea44846837585e0145bf02956e4c8470e4eb16e11208b3fa8756ad8a0896789e51d79f52d66695a081f476fc6a56ab53abf796ab12a0602217cea168ac7e9aa8dda188892c4db29ec5c0f8bf4f48338ee414c54f3559d9f62", 0xd2}, {&(0x7f0000000540)="f021da6423ed547ad2accd5c111306a6ee23f8b44cc9ba115dba98cdc14c7bccef1d842f261cc6a71896da9670ca116a27778f5c44b9960a2947085d8284b2de3274e11f7dfff50c4b507cea4fef51c946b29ece67f3a6d3719d344e7c76f5e78940cfdb6bdd387d1b5727e27880ef6fb65ac5a82ce8458aaf9758ac9871598da4868c10bdf41e8d6c4aafce45ca99156d7fefb5a3142ea1d589e860ba5f5b326ceb9451f04861cd8d6e27c6e754c4b14085c6f850f617f0ac9be6eb444593872daa076edfe52abfbbef73e4d400e9520ca970ec", 0xd4}, {&(0x7f0000000640)="2ccda308980af5090a29858f4ddfe34421d5541c93b920ffa2f2561962d4255bd80a29f6538be01dda3472d1369af3ae36583ad6c558e2bb60f138abee501c11b41c666132d496e3c02348040a4ad047707c4935e5bf68135f2136b79293e16979a9b7a4581641c20d4dc141688cb4c68ecc97711e240d88699abc932ee54be325aa9ed4eedf4718b3a68639779c036596ff62c7356d5db66923f93f486a634f62845bfb3bb2c518090051d17af03d0dd6c081afebd5b11f579227e5f00def6825b69528dd26223a3b8df4b64b7eff4d407d5ff9cda0b28287fadeb004f333354b98dfd2e66129dd7139e361443f", 0xee}], 0x6, &(0x7f0000000780)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x3c, 0x117, 0x2, 0x2a, "797c50bdaea64511349f3c5eacd506420f95ed0dfa848c285086dffd71ed5f7a773777684cb5376e3895"}], 0x4c, 0x4080}, {0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x5c, 0x117, 0x2, 0x4c, "61bf57e4797e3ac2bb5ce958c2910cc9123e1b86c06a511c05aa658efd3ec9c43bf89b824c5661a97f9e260be1456dab69fb3e85e190b525ccb701d0f930aad808bae46a37d4e65fe2788b74"}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @iv={0x108, 0x117, 0x2, 0xf6, "3abd646200e432584aa944e3f758f570e3f0bb788c1e07fd4aeb6aa26833b99b670f100503e230604e8a3e54d3b5eeacdf098de079745802b7de96ea933f0c6253ece5ad860ba06d5d74c8fe1e2cac6d107cf290e4dad4736722ab4deace009d4f21afe4086929f8330bf78f918dfcf11cf0321b3c831b80f1204d61641079b60361ad47c03fee00951e4e4d287885d99499a73ed069b738142e59b351fa588d52f7c4fc1fbd8682a777fe067e39e055c29facc064a6e63766f3b9732689fd91ede165a5e0cfd880f4ad9f5f082cd74271865073564dafeea11ce2dde5fcb6d328bcac0190a2733e7b0470a3685a5a062fa2b2f942a2"}, @assoc={0x10, 0x117, 0x4, 0x6907}, @iv={0x1c, 0x117, 0x2, 0xc, "6943311193eac0ef5ec8997c"}], 0x11b0, 0x10}, {0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000019c0)="742cb7affbc7ef6d9c78ae90390e79a9c7db71b1b0858f6ae9abdab49cc8eb958d7a5c2351d8c32ee0b49470cd32a30fdb56170681d2fa139269993193ab948682b771ecf92d11887e03c04b669eabcbcc2f9cbe92a40ed323da34043bd69cbc2e67eb87", 0x64}, {&(0x7f0000001a40)="76b1b10e649cb5bbb68be44358b60e19b6a7050f693e048fe8fff0f49da33582edeba69a3db81a02dba64f46b43d852063f9657f1684b3d0a52a1f5de2e69a247de75e71984d1272c59b8145cfeb6587bdafc6e9496540a5e7db6449e132d534205201878b913ac23dbb6c05b89af1d9d39e97f7a5527b84ef8704ddaab005a4c64fdec82edeb4", 0x87}, {&(0x7f0000001b00)="61fffc4d40a0b72f23d6889e897b46e5bb40895bedd7230a2f2fe62f1132b7a9e72b2c45769538ed141d1b3e5223622e2f70a20e7fa0df1e18d0a8950a510729ef53433b02c0fbe2f92c5234ab885e1743399521780cb878f5697d63ecf53ecb66aec9e16a100144f790de5363e897356e97d0782e0c1ee429dd17359c2526fb823aa076184b9004912a82bd9e6c994c757883641962069b558c1b09ab6203b0fe0e21491146fee07b8b74112b822486f43a15b5dad54213dd6de8407de6db9cb9b0eaded8b615af039af4b4ce049313fde65548a169e96bf787283866d5c335298dc2660b69cec891d2f043ca4ef1976fbe0011", 0xf4}, {&(0x7f0000001c00)="979ab7b42cd422fbee8d82178a05c7447210436f14161b015f688889fadf2e821cd403a6611e7e28e544c36d609e5f5d747d857d951eb24e9a86cc28e2199f52e5eea5c08e7cce27d2d297cbfc14af4292185a7296c87e917ff53014c52c70cd65252b3de61e6b78bce0dcb5bf49cc6f3983f5ef23bc50696a8316aa90d1d8ad79f287c9eccc0db072a72048550799f5cabede7ae02031b3a157a68b7939472b449802f8b560ad48f0647cf9555f2df57035861fc69e32e5bb21eb084f5b99c402a0c7f113bdf74e5423b3ccb9c4aef9", 0xd0}, {&(0x7f0000001d00)="a9bfdd39144387401c56664f67c6be6837a970848f7756559c63625810ef7a60c62dc74ed5b32ac631f8e9f9547462ce8a0b45a5f540de23fb86318b3d3517b13c67fc7a4c1a4b6f69b2af83afa2e3a8918187dbb683a43873ef829dde48051d69e606055a8d2e26f64295beb15ffb0817b7585b6eba9f3f6719bced3de9dc94f83b136c552cb07d47d0a1dbfe215a463927a56f73f27ff27d5466e39ff03baec9c761645133fc6937a3976dd69e686925005573f95195af5b202609c5c1970ec51c102f3cdfe2492ec8f6e7b70d9a66748431275ba2f59be18e3935292571eb37a3", 0xe2}, {&(0x7f0000001e00)="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", 0x1000}], 0x6, &(0x7f0000002e40)=[@assoc={0x10, 0x117, 0x4, 0x100}], 0x10, 0x20044081}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e80)="c14c5d085232870c8172c8c2ee35476415cefd7b1b5950ab5e5f591eb1880bb7db3e614d1b503b8fad7de0dbf4143ac8913202bd772816dcca3546f6ef9d9a932c97f67d61f1a1d8c25c981e266608b57d15bc7481e68d3101ba58ae23514e361274ebbef982d001cf5fd227d78f549f15c0cc06cc17091bb69b59e8a033676c9c32fa6371b74b880215e31235d42c0d039c42675a062052ca7e74a5bad5550c8d51abb397c6100739c7f1011764a162acbf1418714bb227cc2d4323056e076fa3b5c1bb3a852b4117bab0829fd1ab721698", 0xd2}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002fc0)="841b611b5df840c2c7482d61a53a5fab7742b589", 0x14}, {&(0x7f0000003000)="294183463a24cbd843d7373eb779f960457b77501367f62bf7df58fc06a88cab99f6245102bad0b82dbc1e138f860216d1e7298ed358684f6bdcb5f9f9e4d7369e30865918a5685e3711cf582640fcca36178410117e8b175527c615bf962a62cb7942c8", 0x64}, {&(0x7f0000003080)="422347665f15e0f77ca3414ec510322a3c99ae56a645ea925dbae04f0cf7b672f8b26595017f5b1be8bf6e2eb87328bc2d9cf9206841f54a6ae6b9f53486309d54", 0x41}, {&(0x7f0000003100)="42343a1f129ce081ba67b2edf7", 0xd}], 0x4, 0x0, 0x0, 0x4058}], 0x6, 0x40080) (async, rerun: 32) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (rerun: 32) 09:10:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x1e, 0x80000, 0x3935ead3, &(0x7f0000000000)) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x800) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) socketpair(0xf, 0x6, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_getnexthop={0x64, 0x6a, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000884) 09:10:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x1e, 0x80000, 0x3935ead3, &(0x7f0000000000)) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x800) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6) (async) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) (async) socketpair(0xf, 0x6, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_getnexthop={0x64, 0x6a, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000884) 09:10:36 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x11, "608523b0bc0676ed82f4cb2de67ab2"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) socketpair(0x1e, 0x80000, 0x3935ead3, &(0x7f0000000000)) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x800) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6) (async) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) (async) socketpair(0xf, 0x6, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_getnexthop={0x64, 0x6a, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000884) 09:10:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x2d, 0x4, 0x0, {0x6, 0xa8ff, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x109102) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x38}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 09:10:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x2d, 0x4, 0x0, {0x6, 0xa8ff, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x109102) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x38}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x38}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 09:10:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x2d, 0x4, 0x0, {0x6, 0xa8ff, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x109102) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x38}) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 09:10:36 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x11, "608523b0bc0676ed82f4cb2de67ab2"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x4, 0x1, {{0x22, 0x4, 0x2, 0x34, 0x88, 0x67, 0x0, 0x3f, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x27, 0x85, [@private=0xa010102, @multicast2, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @private=0xa010101, @private=0xa010101]}, @end, @generic={0x94, 0x5, "95b55a"}, @lsrr={0x83, 0x3, 0xf0}, @timestamp_addr={0x44, 0x34, 0x7d, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x22}, 0xffff8dac}, {@empty, 0x8001}, {@private=0xa010101, 0x5}, {@remote, 0x3}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ssrr={0x89, 0xf, 0xe2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101]}]}}}}}) 09:10:36 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x4, 0x1, {{0x22, 0x4, 0x2, 0x34, 0x88, 0x67, 0x0, 0x3f, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x27, 0x85, [@private=0xa010102, @multicast2, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @private=0xa010101, @private=0xa010101]}, @end, @generic={0x94, 0x5, "95b55a"}, @lsrr={0x83, 0x3, 0xf0}, @timestamp_addr={0x44, 0x34, 0x7d, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x22}, 0xffff8dac}, {@empty, 0x8001}, {@private=0xa010101, 0x5}, {@remote, 0x3}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ssrr={0x89, 0xf, 0xe2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101]}]}}}}}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x4, 0x1, {{0x22, 0x4, 0x2, 0x34, 0x88, 0x67, 0x0, 0x3f, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x27, 0x85, [@private=0xa010102, @multicast2, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @private=0xa010101, @private=0xa010101]}, @end, @generic={0x94, 0x5, "95b55a"}, @lsrr={0x83, 0x3, 0xf0}, @timestamp_addr={0x44, 0x34, 0x7d, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x22}, 0xffff8dac}, {@empty, 0x8001}, {@private=0xa010101, 0x5}, {@remote, 0x3}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ssrr={0x89, 0xf, 0xe2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101]}]}}}}}) (async) 09:10:36 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x4, 0x1, {{0x22, 0x4, 0x2, 0x34, 0x88, 0x67, 0x0, 0x3f, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x27, 0x85, [@private=0xa010102, @multicast2, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @private=0xa010101, @private=0xa010101]}, @end, @generic={0x94, 0x5, "95b55a"}, @lsrr={0x83, 0x3, 0xf0}, @timestamp_addr={0x44, 0x34, 0x7d, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x22}, 0xffff8dac}, {@empty, 0x8001}, {@private=0xa010101, 0x5}, {@remote, 0x3}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ssrr={0x89, 0xf, 0xe2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101]}]}}}}}) 09:10:36 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:36 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x11, "608523b0bc0676ed82f4cb2de67ab2"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:36 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 09:10:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 09:10:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:36 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 09:10:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:37 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x11, "608523b0bc0676ed82f4cb2de67ab2"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x74, 0x4) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:10:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x74, 0x4) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) ioctl$TIOCNOTTY(r2, 0x5422) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:10:37 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x74, 0x4) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x74, 0x4) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) ioctl$TIOCNOTTY(r2, 0x5422) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) 09:10:37 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x74, 0x4) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:10:37 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 09:10:37 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x4, 0x1, {{0x22, 0x4, 0x2, 0x34, 0x88, 0x67, 0x0, 0x3f, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x27, 0x85, [@private=0xa010102, @multicast2, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @private=0xa010101, @private=0xa010101]}, @end, @generic={0x94, 0x5, "95b55a"}, @lsrr={0x83, 0x3, 0xf0}, @timestamp_addr={0x44, 0x34, 0x7d, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x22}, 0xffff8dac}, {@empty, 0x8001}, {@private=0xa010101, 0x5}, {@remote, 0x3}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ssrr={0x89, 0xf, 0xe2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101]}]}}}}}) 09:10:37 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) 09:10:37 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:37 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 09:10:37 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x4, 0x1, {{0x22, 0x4, 0x2, 0x34, 0x88, 0x67, 0x0, 0x3f, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x27, 0x85, [@private=0xa010102, @multicast2, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @private=0xa010101, @private=0xa010101]}, @end, @generic={0x94, 0x5, "95b55a"}, @lsrr={0x83, 0x3, 0xf0}, @timestamp_addr={0x44, 0x34, 0x7d, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x22}, 0xffff8dac}, {@empty, 0x8001}, {@private=0xa010101, 0x5}, {@remote, 0x3}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ssrr={0x89, 0xf, 0xe2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101]}]}}}}}) 09:10:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x162, 0x2}, 0xe) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000000)={0xfffffffffffffeab, 0x1, 0x0, 0x0, 0x0, 0x3}) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x4, 0x1, {{0x22, 0x4, 0x2, 0x34, 0x88, 0x67, 0x0, 0x3f, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x27, 0x85, [@private=0xa010102, @multicast2, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @private=0xa010101, @private=0xa010101]}, @end, @generic={0x94, 0x5, "95b55a"}, @lsrr={0x83, 0x3, 0xf0}, @timestamp_addr={0x44, 0x34, 0x7d, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x22}, 0xffff8dac}, {@empty, 0x8001}, {@private=0xa010101, 0x5}, {@remote, 0x3}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ssrr={0x89, 0xf, 0xe2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101]}]}}}}}) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x162, 0x2}, 0xe) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000000)={0xfffffffffffffeab, 0x1, 0x0, 0x0, 0x0, 0x3}) 09:10:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x162, 0x2}, 0xe) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000000)={0xfffffffffffffeab, 0x1, 0x0, 0x0, 0x0, 0x3}) 09:10:37 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x0, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x0, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:37 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000440)={0x38}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x0, 0x4}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000080)=0x1f) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000480)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f00000004c0)={0x18, 0x1, 0x0, 0x0, r4, 0x941}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f0000000240)={0xa, 0x4e21, 0xffffffc1, @private0, 0x96b6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000280)="a8297f6ae8ab2f160b49b65503a0cb4eb2791129bdceafbbcb10108821b4e03e93fb6024f3b63676aef7cb1f60704c271141af00c6daa45dbe08795cdb371aaaa0f209e3881f474a8ef6eadb4577b8735d11b5e8f6327991ed2eee64424c14e9ee142f532fb49be4a135025140817dc598b6d54c0d5c8b004d", 0x79}, {&(0x7f0000000300)="700a3dbee458172d93940a39a34403f0d95d27", 0x13}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000290000000b000000000000005c000000290000003600000040000000000000000730000000010a0408004fffffffffffffff0200000000000000020000000000000001000000000000000000000000000000c910200100"/108], 0x6c}, 0x44000) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 09:10:37 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 09:10:37 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000440)={0x38}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x0, 0x4}) (async, rerun: 32) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000080)=0x1f) (rerun: 32) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000480)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f00000004c0)={0x18, 0x1, 0x0, 0x0, r4, 0x941}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f0000000240)={0xa, 0x4e21, 0xffffffc1, @private0, 0x96b6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000280)="a8297f6ae8ab2f160b49b65503a0cb4eb2791129bdceafbbcb10108821b4e03e93fb6024f3b63676aef7cb1f60704c271141af00c6daa45dbe08795cdb371aaaa0f209e3881f474a8ef6eadb4577b8735d11b5e8f6327991ed2eee64424c14e9ee142f532fb49be4a135025140817dc598b6d54c0d5c8b004d", 0x79}, {&(0x7f0000000300)="700a3dbee458172d93940a39a34403f0d95d27", 0x13}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000290000000b000000000000005c000000290000003600000040000000000000000730000000010a0408004fffffffffffffff0200000000000000020000000000000001000000000000000000000000000000c910200100"/108], 0x6c}, 0x44000) 09:10:37 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 09:10:37 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x0, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:37 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000440)={0x38}) (async) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x0, 0x4}) (async) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000080)=0x1f) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000480)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f00000004c0)={0x18, 0x1, 0x0, 0x0, r4, 0x941}) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f0000000240)={0xa, 0x4e21, 0xffffffc1, @private0, 0x96b6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000280)="a8297f6ae8ab2f160b49b65503a0cb4eb2791129bdceafbbcb10108821b4e03e93fb6024f3b63676aef7cb1f60704c271141af00c6daa45dbe08795cdb371aaaa0f209e3881f474a8ef6eadb4577b8735d11b5e8f6327991ed2eee64424c14e9ee142f532fb49be4a135025140817dc598b6d54c0d5c8b004d", 0x79}, {&(0x7f0000000300)="700a3dbee458172d93940a39a34403f0d95d27", 0x13}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000290000000b000000000000005c000000290000003600000040000000000000000730000000010a0408004fffffffffffffff0200000000000000020000000000000001000000000000000000000000000000c910200100"/108], 0x6c}, 0x44000) 09:10:37 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 1: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x4b1, 'L%\b'}, 0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:37 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 1: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x4b1, 'L%\b'}, 0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:37 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x64, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x2}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 3: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x4b1, 'L%\b'}, 0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:37 executing program 1: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x4b1, 'L%\b'}, 0x6) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:37 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 3: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x4b1, 'L%\b'}, 0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:37 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:37 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x64, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x2}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$damon_contexts(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="202e2f6600006530202e2f66696c6530202e2f66696c6530eb423da6c4fa71f309032b799ceb53328c06366edd40a3aa4e297b9bed6007b19fc72109b4a7d2f507dd63fed1014a0d77b1debdc176a0ef890868dde8d749114158ce11ef4fbfd418ae09406c55db057675182922e3203b7f78f030af86e5363aa2e83cb1dbc546706969f68604be084ac188eaa79050e4425ba7ce7c2f19646fd3f916eb9d01dce0902ed3108dfc8813df57b3939ec24a4e0d4ab3396dcbdd5585f88d412d3217aa0f36317f25d04dd513541a3bd2b49beb7b4a726d67"], 0x4) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0x2}, 0x6) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x6, 0x6, 0xfb, 0x4, 0x7f, 0x6, 0x8000}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r3) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000200)={0x8, "bd3443"}, 0x6) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 09:10:37 executing program 3: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x4b1, 'L%\b'}, 0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 09:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$damon_contexts(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="202e2f6600006530202e2f66696c6530202e2f66696c6530eb423da6c4fa71f309032b799ceb53328c06366edd40a3aa4e297b9bed6007b19fc72109b4a7d2f507dd63fed1014a0d77b1debdc176a0ef890868dde8d749114158ce11ef4fbfd418ae09406c55db057675182922e3203b7f78f030af86e5363aa2e83cb1dbc546706969f68604be084ac188eaa79050e4425ba7ce7c2f19646fd3f916eb9d01dce0902ed3108dfc8813df57b3939ec24a4e0d4ab3396dcbdd5585f88d412d3217aa0f36317f25d04dd513541a3bd2b49beb7b4a726d67"], 0x4) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0x2}, 0x6) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x6, 0x6, 0xfb, 0x4, 0x7f, 0x6, 0x8000}, 0xc) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r3) (async) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000200)={0x8, "bd3443"}, 0x6) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 09:10:37 executing program 3: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100)={0x4b1, 'L%\b'}, 0x6) 09:10:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async, rerun: 64) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async, rerun: 32) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) write$damon_contexts(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="202e2f6600006530202e2f66696c6530202e2f66696c6530eb423da6c4fa71f309032b799ceb53328c06366edd40a3aa4e297b9bed6007b19fc72109b4a7d2f507dd63fed1014a0d77b1debdc176a0ef890868dde8d749114158ce11ef4fbfd418ae09406c55db057675182922e3203b7f78f030af86e5363aa2e83cb1dbc546706969f68604be084ac188eaa79050e4425ba7ce7c2f19646fd3f916eb9d01dce0902ed3108dfc8813df57b3939ec24a4e0d4ab3396dcbdd5585f88d412d3217aa0f36317f25d04dd513541a3bd2b49beb7b4a726d67"], 0x4) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async, rerun: 64) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0x2}, 0x6) (rerun: 64) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x6, 0x6, 0xfb, 0x4, 0x7f, 0x6, 0x8000}, 0xc) (async, rerun: 64) socket$qrtr(0x2a, 0x2, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r3) (async) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000200)={0x8, "bd3443"}, 0x6) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) 09:10:38 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x64, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x2}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:38 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x66, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x4, "0091"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed, 0x8}, 0xe) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80000) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x183000) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x80, 0x20, 0x9, 0x6, {{0x1e, 0x4, 0x1, 0x10, 0x78, 0x68, 0x0, 0x7, 0x2d, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0xa4, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x9}, {@remote, 0x14e9}]}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x8, [{@loopback, 0x5}, {@broadcast, 0x1}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x10001}, {@empty, 0x401}]}, @timestamp={0x44, 0x10, 0x7d, 0x0, 0xc, [0x4, 0xffff, 0x5]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newtclass={0x68, 0x28, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0xffe0}, {0x8, 0xfffa}, {0x5f68012081468768, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x3f}}, @TCA_RATE={0x6, 0x5, {0x5, 0x80}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000100)=0x2) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9e0b, 0x2}, 0xe) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="4cec60c02734a058d4dd0f540bf87c0893be", 0x12}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x66, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x4, "0091"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x7, &(0x7f0000000000)) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80000) (async) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x183000) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x80, 0x20, 0x9, 0x6, {{0x1e, 0x4, 0x1, 0x10, 0x78, 0x68, 0x0, 0x7, 0x2d, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0xa4, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x9}, {@remote, 0x14e9}]}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x8, [{@loopback, 0x5}, {@broadcast, 0x1}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x10001}, {@empty, 0x401}]}, @timestamp={0x44, 0x10, 0x7d, 0x0, 0xc, [0x4, 0xffff, 0x5]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newtclass={0x68, 0x28, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0xffe0}, {0x8, 0xfffa}, {0x5f68012081468768, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x3f}}, @TCA_RATE={0x6, 0x5, {0x5, 0x80}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000100)=0x2) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9e0b, 0x2}, 0xe) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 3: socketpair(0x0, 0x3, 0x7, &(0x7f0000000000)) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x66, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x4, "0091"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:38 executing program 3: socketpair(0x0, 0x3, 0x7, &(0x7f0000000000)) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80000) (async) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x183000) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x80, 0x20, 0x9, 0x6, {{0x1e, 0x4, 0x1, 0x10, 0x78, 0x68, 0x0, 0x7, 0x2d, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0xa4, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x9}, {@remote, 0x14e9}]}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x8, [{@loopback, 0x5}, {@broadcast, 0x1}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x10001}, {@empty, 0x401}]}, @timestamp={0x44, 0x10, 0x7d, 0x0, 0xc, [0x4, 0xffff, 0x5]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newtclass={0x68, 0x28, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0xffe0}, {0x8, 0xfffa}, {0x5f68012081468768, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x3f}}, @TCA_RATE={0x6, 0x5, {0x5, 0x80}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000100)=0x2) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9e0b, 0x2}, 0xe) 09:10:38 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 3: socketpair(0x0, 0x3, 0x7, &(0x7f0000000000)) 09:10:38 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x5, "0091fd"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:38 executing program 3: socketpair(0x10, 0x0, 0x7, &(0x7f0000000000)) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 1: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) sendmmsg$alg(r1, &(0x7f0000001280)=[{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000180)="22f168bb90300423545601e9f776498c552024c3f69bbfe17ee67a570b193d6119756bb919f8a7ee", 0x28}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="d5ffbd549986a241097e7cf59da6da151269ff118ebe59ffd1ed2c63760035cc3029e7c9be881c6172fe87d808e3c5d9da959cde8098bb8f44", 0x39}], 0x3, &(0x7f0000001240), 0x0, 0x24004010}], 0x1, 0x8c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0xa8, 0x21, 0x102, 0x70bd2d, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x3, 0x7, 0x0, 0x0, 0x6, 0x12}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FRA_DST={0x14, 0x1, @private2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FRA_SRC={0x14, 0x2, @empty}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000800) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 3: socketpair(0x10, 0x0, 0x7, &(0x7f0000000000)) 09:10:38 executing program 1: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) sendmmsg$alg(r1, &(0x7f0000001280)=[{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000180)="22f168bb90300423545601e9f776498c552024c3f69bbfe17ee67a570b193d6119756bb919f8a7ee", 0x28}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="d5ffbd549986a241097e7cf59da6da151269ff118ebe59ffd1ed2c63760035cc3029e7c9be881c6172fe87d808e3c5d9da959cde8098bb8f44", 0x39}], 0x3, &(0x7f0000001240), 0x0, 0x24004010}], 0x1, 0x8c0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0xa8, 0x21, 0x102, 0x70bd2d, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x3, 0x7, 0x0, 0x0, 0x6, 0x12}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FRA_DST={0x14, 0x1, @private2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FRA_SRC={0x14, 0x2, @empty}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000800) 09:10:38 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x5, "0091fd"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:38 executing program 3: socketpair(0x10, 0x0, 0x7, &(0x7f0000000000)) 09:10:38 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 1: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async, rerun: 64) sendmmsg$alg(r1, &(0x7f0000001280)=[{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000180)="22f168bb90300423545601e9f776498c552024c3f69bbfe17ee67a570b193d6119756bb919f8a7ee", 0x28}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="d5ffbd549986a241097e7cf59da6da151269ff118ebe59ffd1ed2c63760035cc3029e7c9be881c6172fe87d808e3c5d9da959cde8098bb8f44", 0x39}], 0x3, &(0x7f0000001240), 0x0, 0x24004010}], 0x1, 0x8c0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0xa8, 0x21, 0x102, 0x70bd2d, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x3, 0x7, 0x0, 0x0, 0x6, 0x12}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FRA_DST={0x14, 0x1, @private2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FRA_SRC={0x14, 0x2, @empty}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000800) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:38 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @fixed}, 0xe) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 09:10:38 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x5, "0091fd"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x7, 0x0) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x7, 0x0) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 09:10:38 executing program 3: socketpair(0x10, 0x3, 0x7, 0x0) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:38 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x59, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000140)={0x20, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) socketpair(0x5, 0xa, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x121000, 0x133) r2 = openat$rfkill(0xffffff9c, &(0x7f00000000c0), 0x25c1, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) [ 135.297670][T19145] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000140)={0x20, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}]}) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) socketpair(0x5, 0xa, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x121000, 0x133) (async) r2 = openat$rfkill(0xffffff9c, &(0x7f00000000c0), 0x25c1, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) 09:10:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x59, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:39 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:39 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000140)={0x20, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}]}) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) socketpair(0x5, 0xa, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x121000, 0x133) r2 = openat$rfkill(0xffffff9c, &(0x7f00000000c0), 0x25c1, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) 09:10:39 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x59, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x200) getsockname$qrtr(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x800) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:39 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x200) getsockname$qrtr(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x800) (async) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:39 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x200) (async) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x200) getsockname$qrtr(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x800) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) 09:10:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x0, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) (async) 09:10:39 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:39 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) (async, rerun: 32) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) 09:10:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x0, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 09:10:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x0, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) (async, rerun: 32) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (rerun: 32) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$VT_SETMODE(r1, 0x5602, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8c}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x59, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$VT_SETMODE(r1, 0x5602, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$VT_SETMODE(r1, 0x5602, 0x0) (async) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5b, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0x2}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$VT_SETMODE(r1, 0x5602, 0x0) (async) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000)={0xec, "6e1c2e"}, 0x6) 09:10:39 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x0, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5b, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0x2}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) (async) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000)={0xec, "6e1c2e"}, 0x6) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x16, &(0x7f0000000040)=@framed={{}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000)={0xec, "6e1c2e"}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000)={0xec, "6e1c2e"}, 0x6) (async) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x14, &(0x7f0000000040)=@framed={{}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x1a, 0x4) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000)={0xec, "6e1c2e"}, 0x6) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x13, &(0x7f0000000040)=@framed={{}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x1a, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x1a, 0x4) (async) 09:10:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x43, 0x4, 0x2, 0x1, 0x10c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x5b, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0x2}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x1a, 0x4) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x12, &(0x7f0000000040)=@framed={{}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000)={0xec, "6e1c2e"}, 0x6) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xe) gettid() 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x10, &(0x7f0000000040)=@framed={{}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000)={0xec, "6e1c2e"}, 0x6) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xe) (async) gettid() 09:10:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0x9, "a5aaceb03f777a"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f0000000040)=@framed={{}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async, rerun: 64) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 64) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async, rerun: 64) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xe) (rerun: 64) gettid() 09:10:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000040)=@framed={{}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 09:10:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000001480), 0x440000, 0x100) connect$bt_l2cap(r1, &(0x7f00000014c0)={0x1f, 0xb7, @any, 0x4, 0x2}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0x0, 0xbd, {{0x18, 0x4, 0x0, 0x7, 0x60, 0x64, 0x0, 0x4, 0x2f, 0x0, @local, @multicast1, {[@lsrr={0x83, 0xb, 0x4c, [@private=0xa010100, @loopback]}, @end, @timestamp_prespec={0x44, 0xc, 0x24, 0x3, 0x5, [{@empty, 0xffffffff}]}, @timestamp={0x44, 0x14, 0x59, 0x0, 0x9, [0x1f, 0xfffffff7, 0x9, 0x80000001]}, @timestamp={0x44, 0x10, 0x87, 0x0, 0x8, [0x40, 0x5, 0x8]}, @generic={0x85, 0x10, "730e1ca8c9241280766e09c83db4"}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000000100)=@deltfilter={0x12fc, 0x2d, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {0xe}, {0x7, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_tcindex={{0xc}, {0x12ac, 0x2, [@TCA_TCINDEX_ACT={0x12a0, 0x7, [@m_tunnel_key={0x3c, 0x19, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x1180, 0x5, 0x0, 0x0, {{0x7}, {0x1084, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x102a, 0x6, {0x9, 'nat\x00', 0x3f, 0x1ff, "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"}}, @TCA_IPT_TARG={0x43, 0x6, {0x100, 'filter\x00', 0xa, 0x400, "745117a2c4ddc288e74459d5a8ec5e7b1d24b1b9341afb7a60"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xd5, 0x6, "593d1bca5b82bf99993f6f6aa9dd97f829d3bc9390dbbb7468f6a7d4ccb9eb226dbaf4449ac40702b7a518f1bed1c15a59e86ba81e53d488fdf5a46e90c66d5d84575d4c2017371fd1c421f9e12968168507ea5eff1ec49d30b2de489bca72be5cc32cebdf817c45537248aaa750bb0224be8a567381b49959772452cd2b691f4b30caccdc96ffbe8b1d6667364c6117d2a11c23985150e2284cd29449647a7cf5fe70df69515601e0a79c9bb1ef307bac4d4ae3e3c577fc0c750d287c66b3181a2a14ec7d2cb2ec8f5bacb97eea7192dc"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0xe0, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0xb5, 0x6, "d2aba750f5ef91955971f15c3405ed396fca20f820f84954efd45cd5101c2e5c2f072be466bcda6d6597a4736cbbaaf6ce5c7a57eb842a105b8d0d8ac89a8f3406aa8672aa1e288068510ad70c15bc01c4e9ba4e744dbee41e4ef81acd4e99173a48e50178284f9bd2e9bc745393c8b907f3d066b98740e9005eb2efbdd2f6cb57fd9da038242e614f7e684410ee17571d93e0ce72560db1669b5e1f0b4087eef3a6664ee6bcc7aa0a4df07d94fcc0adba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0xd1f}, @TCA_RATE={0x6, 0x5, {0x40, 0x3}}, @TCA_RATE={0x6, 0x5, {0xc1, 0x1f}}]}, 0x12fc}, 0x1, 0x0, 0x0, 0x48001}, 0x4) 09:10:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) 09:10:40 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0x9, "a5aaceb03f777a"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@generic={0x3, 0x4, 0x0, 0x3, 0x7}]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000001480), 0x440000, 0x100) connect$bt_l2cap(r1, &(0x7f00000014c0)={0x1f, 0xb7, @any, 0x4, 0x2}, 0xe) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0x0, 0xbd, {{0x18, 0x4, 0x0, 0x7, 0x60, 0x64, 0x0, 0x4, 0x2f, 0x0, @local, @multicast1, {[@lsrr={0x83, 0xb, 0x4c, [@private=0xa010100, @loopback]}, @end, @timestamp_prespec={0x44, 0xc, 0x24, 0x3, 0x5, [{@empty, 0xffffffff}]}, @timestamp={0x44, 0x14, 0x59, 0x0, 0x9, [0x1f, 0xfffffff7, 0x9, 0x80000001]}, @timestamp={0x44, 0x10, 0x87, 0x0, 0x8, [0x40, 0x5, 0x8]}, @generic={0x85, 0x10, "730e1ca8c9241280766e09c83db4"}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000000100)=@deltfilter={0x12fc, 0x2d, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {0xe}, {0x7, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_tcindex={{0xc}, {0x12ac, 0x2, [@TCA_TCINDEX_ACT={0x12a0, 0x7, [@m_tunnel_key={0x3c, 0x19, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x1180, 0x5, 0x0, 0x0, {{0x7}, {0x1084, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x102a, 0x6, {0x9, 'nat\x00', 0x3f, 0x1ff, "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"}}, @TCA_IPT_TARG={0x43, 0x6, {0x100, 'filter\x00', 0xa, 0x400, "745117a2c4ddc288e74459d5a8ec5e7b1d24b1b9341afb7a60"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xd5, 0x6, "593d1bca5b82bf99993f6f6aa9dd97f829d3bc9390dbbb7468f6a7d4ccb9eb226dbaf4449ac40702b7a518f1bed1c15a59e86ba81e53d488fdf5a46e90c66d5d84575d4c2017371fd1c421f9e12968168507ea5eff1ec49d30b2de489bca72be5cc32cebdf817c45537248aaa750bb0224be8a567381b49959772452cd2b691f4b30caccdc96ffbe8b1d6667364c6117d2a11c23985150e2284cd29449647a7cf5fe70df69515601e0a79c9bb1ef307bac4d4ae3e3c577fc0c750d287c66b3181a2a14ec7d2cb2ec8f5bacb97eea7192dc"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0xe0, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0xb5, 0x6, "d2aba750f5ef91955971f15c3405ed396fca20f820f84954efd45cd5101c2e5c2f072be466bcda6d6597a4736cbbaaf6ce5c7a57eb842a105b8d0d8ac89a8f3406aa8672aa1e288068510ad70c15bc01c4e9ba4e744dbee41e4ef81acd4e99173a48e50178284f9bd2e9bc745393c8b907f3d066b98740e9005eb2efbdd2f6cb57fd9da038242e614f7e684410ee17571d93e0ce72560db1669b5e1f0b4087eef3a6664ee6bcc7aa0a4df07d94fcc0adba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0xd1f}, @TCA_RATE={0x6, 0x5, {0x40, 0x3}}, @TCA_RATE={0x6, 0x5, {0xc1, 0x1f}}]}, 0x12fc}, 0x1, 0x0, 0x0, 0x48001}, 0x4) 09:10:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) 09:10:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000001480), 0x440000, 0x100) connect$bt_l2cap(r1, &(0x7f00000014c0)={0x1f, 0xb7, @any, 0x4, 0x2}, 0xe) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0x0, 0xbd, {{0x18, 0x4, 0x0, 0x7, 0x60, 0x64, 0x0, 0x4, 0x2f, 0x0, @local, @multicast1, {[@lsrr={0x83, 0xb, 0x4c, [@private=0xa010100, @loopback]}, @end, @timestamp_prespec={0x44, 0xc, 0x24, 0x3, 0x5, [{@empty, 0xffffffff}]}, @timestamp={0x44, 0x14, 0x59, 0x0, 0x9, [0x1f, 0xfffffff7, 0x9, 0x80000001]}, @timestamp={0x44, 0x10, 0x87, 0x0, 0x8, [0x40, 0x5, 0x8]}, @generic={0x85, 0x10, "730e1ca8c9241280766e09c83db4"}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000000100)=@deltfilter={0x12fc, 0x2d, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {0xe}, {0x7, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_tcindex={{0xc}, {0x12ac, 0x2, [@TCA_TCINDEX_ACT={0x12a0, 0x7, [@m_tunnel_key={0x3c, 0x19, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x1180, 0x5, 0x0, 0x0, {{0x7}, {0x1084, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x102a, 0x6, {0x9, 'nat\x00', 0x3f, 0x1ff, "cb1b5370df14bd0712bea512847709a5d114ec2713cb02f76c6b9102b1bf5e87520dcf0defadf0b5c380cb4df0f44ee8a48841f80f81cf436770b375a0efab35a4043fa8d1d6e987bb7bd6977bc282cd21f054ee65e1b0e291068b28a63715a07ac9d354db1eb15d73bc05088b568c9987448a48c2abff9a94ad30723bb84ce2ff23c6d882466fbcf5cfc59dfc358aa4831475bee7720035e406823116bd87244824f817bf6eb473919c6f5c4fc41310673a21b1034dd0daf6381337aedf7d6a5f6cf230aceaba7d55205abb7b868657789b9f24fce0f1e7e5ec5a99182574ea5dde1a575ce619e666b26c0dbd28a1bd182493d5592794ac19b5563a33bac3269219532229a4c013d24eff3905ed181bf3b3e66c3b8431c828fc55bc6241f66b85f7614de8b209e389778db6c26e77d842efc8eb37c40d96f47ca8d329532f9deccb99a9cf74c16fd2ec35a2789f3b48fbe0736c583fea40809de711f0eb7557084a71eeb98eaa6093d33b2b37e008952bfd3d774ca352acde436d7b16e0b2a842cfb98c47819f88257def6f8e3d23c84404883cd12844fa2d5f595d2e9ea39c0d4fa42d944d76141e92689c3b9841f499a5c9d90be3805b7fba7503cf5ee0bbda8c4da12771579918abbc75ba383deed4544a7be155286b5d476190eb277d022ab83ab28c6dd0a91dc05022b0837c4050b4fa97345b24dbad9b268cb9efc1af5ec2a6c2ca1f2693d27f8e5af20c3db93f64e336753037cefd4839f8036d880283e2016dec29c1abc057614a571a7d26c76f782fd754940a7cfd0f547e46215f5bcc9e1d33d97af23d169d1b680f5a0be4ce929723445860d7b2f5395c050407644f5153801547fdfe26af6b89f990476cf47185babc8617cc25d5eceb96675aa2fb0b2c243c58162ca9905d7065c9573184c8c80e17c406f8d8f3905f3973c8cc83ac5a12bbaf007503f7d51fb06bc48c623d090f4530071aaabb0ed35138bbbe6dfaa4f7bc40f41885c200595cf867ff65d40f4c270beb46481df72e061a3d119b2ccdc250121d3a22e55dc576cb00169f7621248ca3b5afa0f266e038a7c56549ccba05e9cfb5771df77650cc0029ea7f74a9109afa1ccce5b73c396f779c253295902130ae8def5803b47e89c5009d2207fd4edd10a7971af17a70cc04da04e2c6d416f03bfabde80acc7d1f043a83eea2f845c88594a79350d1d62b36ec2537f1bc3ce4572bafd6ebfa277420f7ba4abb8dd8b2de70f953e212ac7f65163fcd415a37c3a00f8e5adb985b626eaa4a6be643f031d34d92d47dbab0a002b622ca2d983dcf8797f32e7b6c2f9b826fa940ef059afcfb2f9d5d15e7c09408740ffe51f798b9a6c4da55d6f3efdce664b9fbe4464849681f378501d9e10c053a37b9f11c90ecb0316936b8ac3551cf5e419ad7fdf5064a3f7c937f13fc6812d94fbbcd0b6f9aa1c248183d2eff212c416b2f23d79e86454e6fed20c7d43187dab537209b1b673412c7895b7174775d4cf06fad76e5499b0cd550e8efdcfc8bf0b9d7d5936b1f862e67e73da2fded0c558fff7afb2f3bcce896e475c3bc3ecf62fd29b16d176c5c571335ed42dd13e57651096e66ed74b35574e9cfee68af77a4dabcb8a7b69a5d9ec85b9e392d29a62c85b7fd19afcbcd1c0d9dae59df7cc2c976e8891a1c6b23106330f0e6ca0bace684b56251dc952f5f49e968d77133a2e7befa946f1be1faf9564dc89ee051db746881830bb41ed072e9af42c2895737895fc5270883a16095c8c8e3723eaa6336be0082ff3455f3a90a5dc617e5a91a9ce2eef4eab8a406c04374699fc3682d9e3b8dc5dd509fa2bb6d0426117f37ddeaae65d31a94de7a5dd332ed7924cc9887408a476dc327537b5be58189788fb46fe71c3c6fc7f767d52fbaaead65a8fca28f30f9f9200fd536cf5a4e1ddaa4b2729f5bba7fe4fff044058d5ac68fbc67b9e171d2c1071288293dca7227b254af0aa8e6998f969c01a2ad779d4e782eb015c7e1ba0685c741f4b9b9d50f053104ab0f4b8b130aeac68b05176a2c79e3b745b819e0cfe2a2ffcba4b401c71201f8d11e75719e3634c1df3535e48f4c922b5d327a876d21f951f34d385f751e46671b41aadbbbce542e5fcdc4489d25f70181f44508183a56eef2694683941241618500ec98bfcebbece7d785c9f6b36818c3ddd1f38fe7b4d4a31e585b2933cbdc3c9d8d855d96f7637c1044f716ed669c96e692ac1b64fdfdb2e3d40bcf852906d04031a7d7597358bcb11391b6db47edf609bf1a32751237e469afcdaa1578814c5d5d3b6994c1d21d4f0c884d3f07e51da1c2335806294d603226552ff717971df1020dee283c2550b2993ce69e0fa0a07a555d7fd931a8d6f295677a4a041e69ed9c7525260cf6a9dcf65bd3fc128793aa8946bb4ed7d35c6f7bda276a4846b46e6986f83b3ffa130192f6dedbf7774ada8cdc5f13e98935c804244d3ec337061aea213e077f97194fec718c9fc472ecd23ec48a879c713bfd7c1e271ae7c1786a7e5f25845e6751225a2d4d9fbf27e53b623d7455fe1a36d03f5d3b2a554fd6be71410e70e1ad2af0e6f63b7a0f3f45bd2199397b67694c2c5306816d25effb5c0d9b2fbcc492c67ac6464a7ae95fc5d0c231db2d4c1d621a782b775ff5e4d0e5fea9d3d77cd37a58d24e91124217bdda233a8c08377d4021761e08851cf1938375ddc83781872193209f79fb909ed7a8386fd0157cb780353322b476537f87bcb7c525774007d791a142cd2246a7ae99e6969635fb42c6042b143578af8527ef65082bba3f1cd9eaca416ae3d2022826412b8e0bc36838de73b9a9338a021f30741b72fb158c37ad66539c7befd9fee7d4f1a706497451d325fb77bea36f81385e52ce754d27765268a8970bd12c7a914b4d42c7832a0c0523213f4f9890455bad0173a916dd506cb5cfaace55b3815046df6308c2d5fa63505c1481e12a81f099dc678eaac7361174f02b786fa6e4416426d586abb6fc0dfd5b598bdb6f60b1698200971933f4e8e36ededf78b9c1a1d88d9187ac20f1d2b3fc815def7fb44b5f80d1836cb38e84198c0b6e21b3d8262f9041c534336bf69fef25a30261df094f10c8446d396894c7eafdfc644a8947d6e93b37ae2571865e4b5845a493050bd5502b58071892d28d79533c5dcd26e922be0f5508a04eff3ff939817beff32a332f54ca30141bd11a5a58b8d32b7c758ef3f4a4a3eb7fcc14e09da19958c69a5dfa17b3fcf351482ef8f88a46371a0a7e1aa0a648aa97f22d8f12e052869be418448882c1962b9efc02fc36c6e26bd2370c145d324ba65590020e6d055bce6c7284e7e29fdc24e7d5ddfcd8f4cefdbfb4246304ffe5c4b22f9c0a123ae71162a189aa34edfdd8563a4bfb19b3c0aac2eeddd7feb2500434451f98342f4e7733e3e7fe7235d611d8c9ef77919d343dd5e499fc39edb8e0e18b9afa305e1d0fe5c15f4d0557fbad323de9690e03c731a23a2b3d1561d053e0c03e4af3e0342f87f0aac0b70a297d44d4ef5e9b5c626d2846615862d5473a08f095fe702ef1509bc6eaf590dc29336e9fb9f5ca2053972c990345d081b1494ff4cfd0ac385be7343ab36b35ac7b7d200fe103e44847f1ad30f42f13f6c2f77c5c6470a70f6d267f13a9d4e0c2219561349773e4e37bacdc0fa64f4bebfa749e58a5358739e613e0edaa0729ea69f90ca82c7efd470343a25d198a3057f0af4ae24c9c9f4876065b128399b12c75382c5bc6a7dc3fb4795cafe4512d5ef902fc78799a93aaf91c57c46287eedc03bcb904efedeee8b19fbd1247efc1482f3a6134dd7159bc1e24d6b14c27a60024c954d1b61369d7425f740c97e5f9bc5308ab8d9775447d63799a243bc2574956b8374e9e1ec2aca1d5081582316cd8fbfc3140564c4d1b11aecca818e5c41663cc5494fc0420230617802c08b029c34820d35dc45df72b005ce73c6248b30aea461039f1cb34f7c1a2be1e75ea195a1e02db6c6827a8774d53c6fd5c4c372c889584f5b0a1ce753657493d23fedd811120d45a6d19eed4d7a5df0c6371806006cb8ff8b15e09b2b65ba1d4e24fab1569360dec46ce17550d9ea19d75cc8724a839de43dad7e2d762818575b229e15bc36865bc6da7fa62da9891a0376613c48998ffff75b0617615cb5364d8c0b93982584dbc125df34ab61d1242f92a8f9d6d160f3f30b66627b9ded8fa1550268cc4d7f8f1dcc94e51e8a401feb6cbd3f695a942f788b0280528266878fc3975a84d8afe56e7d34d1123d4b9ef13f56643e9d3c521b8e8e98158e69266a551d37df64457ef8e2d623e33ecd9df7a0d0725707a5dbcc7d360bf5da297127a77a9835dcb064e84e5ac6826499368de2df543d862d7cbca03830ae4759a2855be227f6690861af420d0c0c6d21e3432b3db07b47fbf8e4f3839426c033fe35134f331a955bf5ec85e96659aea95553f17fb27928a46eff02b165f46bacf95cd88c3491b249543b482e750fde1952f4a93ec02f0249cfd2f528a750eb6a838ef83510d3928f0a535fde94789f6b8fd6c02aa23328e017a3a0fa4f78d597b2bcd2a81804db7f95cdbd0fedc2e14f05c94c67c9cc4f132bf99b80802ca4554e54fe42accf89222bc921c5a222180eacbffea167864078fee44d5bcfeb1e1e700dfd53d967d4b08a39211a408a62f98de8d4c51f7464b160d02f805a49ea8f970c573c95b2d1c08f4320c51c339f7c7d2d5d1c1ff3c951aa56c46914e3e2f5e169a4b05f13f0aa32e18171e94b9b11eb20d1ad4864bbb25831e1444d7d846ff26e45c76232788dd84eb4763399f5340a22b043edd78ba8fb12afd55580858080b3f58721a296ef6ae1698a263b20db72be205b54bdfa01a46e582f71da7461eb82d2714fd23c57f09161e26611beec30caa6fe358d9c821a2033fb09fa22bca9b4d1717145a407b47485265b1952ff6f1f8544e29b92cfbd433bea7605eb389a38575213f042aada067931be29b5ce58c4c63a9b465f891976cf39270ed75e4c38bb92499d0b1c4a14b371f721bc323e02a6e72abad8d8a395af9385de67f2aad2fb4d816cf3f3cf3d75049ee499fa6af3c98695f05701390a55a1279e9a170c40c4a7a0f8a3aec0179ba58b523f71e720b008feec5042b5b160299777b4b17c303e197cbcba2aab3b0805378c4b1267a33ec81e79e8545a5574b07c0dc3765bb1ad4889ca87e091397d6657ca19cc1e738359b4b7c0139c1b29aa387d94d350cea05841bdb65ba0e67b643bef0c57b516b092fc97ce254ce42506093655bd114419da18dad9926ea009aa44a8a388009b2483eaa9ea0306b725eb1ac6b65c5c379bb9e6a4e4f70af571a0ea542f3e2d33671781264a027dcf2f2082a994495d50f9e71e2dd569dc694553b1c66a67350c536dd5727d22bffb1f02eadcc97eef00babefc062a6e9660959d56772d7dbbe73ac509d0702ffd5abe05314339d85f694666562f1272da6adff7c34f9d46c70ae23c3de16192930d735b809960af8fe4749970d39cda8be6dba0a3fa6132aa51055d9de16e1b0adacb625f120bd21ebeefd47af04a67a77b1a80f40b8a4093b8ddbd4c431c224765a2825a3abffb25b333e26db55202f51d8d12e5c38f7ff4327be8bd0d700e9d823ac8e1b04efec5faee22d56515a663f16a58affe6a6fdfd197f7a1a473c4b51e755f3ada39243bf6225626818954f460315c264b92390a7c92e077d0b689555324f38b6eb61ac10fb4a6f9bd8e3aa3efa195323185c"}}, @TCA_IPT_TARG={0x43, 0x6, {0x100, 'filter\x00', 0xa, 0x400, "745117a2c4ddc288e74459d5a8ec5e7b1d24b1b9341afb7a60"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xd5, 0x6, "593d1bca5b82bf99993f6f6aa9dd97f829d3bc9390dbbb7468f6a7d4ccb9eb226dbaf4449ac40702b7a518f1bed1c15a59e86ba81e53d488fdf5a46e90c66d5d84575d4c2017371fd1c421f9e12968168507ea5eff1ec49d30b2de489bca72be5cc32cebdf817c45537248aaa750bb0224be8a567381b49959772452cd2b691f4b30caccdc96ffbe8b1d6667364c6117d2a11c23985150e2284cd29449647a7cf5fe70df69515601e0a79c9bb1ef307bac4d4ae3e3c577fc0c750d287c66b3181a2a14ec7d2cb2ec8f5bacb97eea7192dc"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0xe0, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0xb5, 0x6, "d2aba750f5ef91955971f15c3405ed396fca20f820f84954efd45cd5101c2e5c2f072be466bcda6d6597a4736cbbaaf6ce5c7a57eb842a105b8d0d8ac89a8f3406aa8672aa1e288068510ad70c15bc01c4e9ba4e744dbee41e4ef81acd4e99173a48e50178284f9bd2e9bc745393c8b907f3d066b98740e9005eb2efbdd2f6cb57fd9da038242e614f7e684410ee17571d93e0ce72560db1669b5e1f0b4087eef3a6664ee6bcc7aa0a4df07d94fcc0adba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0xd1f}, @TCA_RATE={0x6, 0x5, {0x40, 0x3}}, @TCA_RATE={0x6, 0x5, {0xc1, 0x1f}}]}, 0x12fc}, 0x1, 0x0, 0x0, 0x48001}, 0x4) 09:10:40 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) 09:10:40 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0x9, "a5aaceb03f777a"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0, 0xff, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xff, @none, 0x2}, 0xe) 09:10:40 executing program 0: socketpair(0x2a, 0x80000, 0x6, &(0x7f0000000040)) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async, rerun: 64) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xff, @none, 0x2}, 0xe) (rerun: 64) 09:10:40 executing program 0: socketpair(0x0, 0x80000, 0x6, &(0x7f0000000040)) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:40 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xc, "a5aaceb03f777af76f6c"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:40 executing program 0: socketpair(0x0, 0x80000, 0x6, &(0x7f0000000040)) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xff, @none, 0x2}, 0xe) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:40 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = getpid() ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:40 executing program 0: socketpair(0x0, 0x80000, 0x6, &(0x7f0000000040)) 09:10:40 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) r1 = getpid() ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) getpid() (async) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=r1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) (async) 09:10:40 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xc, "a5aaceb03f777af76f6c"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:40 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) getpid() (async) r1 = getpid() ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:40 executing program 0: socketpair(0x2a, 0x0, 0x6, &(0x7f0000000040)) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0xa}, {0x3, 0x4, 0x3, 0x6}, {0x5, 0x4, 0x4, 0x3}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x7}], 0x10, 0x3}, 0x90) 09:10:40 executing program 1: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) 09:10:40 executing program 0: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000040)) 09:10:40 executing program 1: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getuid() (async) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) (async) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) 09:10:40 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xc, "a5aaceb03f777af76f6c"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) 09:10:40 executing program 0: socketpair(0x2a, 0x0, 0x0, 0x0) 09:10:40 executing program 1: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) (async) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) (async) getuid() (async) write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) (async) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) (async) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) (async) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) (async) 09:10:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) 09:10:40 executing program 0: socketpair(0x2a, 0x0, 0x0, 0x0) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/131, 0x83) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x0) r2 = accept4$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x800) accept4$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0x0, @none}, &(0x7f0000000400)=0xe, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x10402, 0x195) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020000092e00040027bd70002e5acf510580e7c1", @ANYRES32=r4, @ANYBLOB="a79a9ac3f1ff0a00100006000300040008000b00ffffff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0x20, 0x4) 09:10:40 executing program 0: socketpair(0x2a, 0x0, 0x0, 0x0) 09:10:40 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/131, 0x83) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x0) r2 = accept4$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x800) (async, rerun: 64) accept4$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0x0, @none}, &(0x7f0000000400)=0xe, 0x0) (rerun: 64) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x10402, 0x195) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020000092e00040027bd70002e5acf510580e7c1", @ANYRES32=r4, @ANYBLOB="a79a9ac3f1ff0a00100006000300040008000b00ffffff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0x20, 0x4) 09:10:40 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xe, "a5aaceb03f777af76f6c8adb"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:40 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/131, 0x83) (async) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/131, 0x83) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x0) r2 = accept4$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x800) accept4$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0x0, @none}, &(0x7f0000000400)=0xe, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0x0, @none}, &(0x7f0000000400)=0xe, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x10402, 0x195) (async) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x10402, 0x195) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020000092e00040027bd70002e5acf510580e7c1", @ANYRES32=r4, @ANYBLOB="a79a9ac3f1ff0a00100006000300040008000b00ffffff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0x20, 0x4) 09:10:40 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) 09:10:40 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 09:10:40 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) 09:10:40 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) 09:10:40 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xe, "a5aaceb03f777af76f6c8adb"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 09:10:40 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 09:10:40 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 09:10:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 09:10:40 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) 09:10:40 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r3, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000006200)={0x90, 0xfffffffffffffffe, r6, {0x2, 0x3, 0x4, 0x805, 0x3d3, 0x50bd847b, {0x2, 0x10000007fffffff, 0x4d0, 0x4, 0x4, 0x5, 0x3268, 0x6, 0xffffffff, 0x6000, 0x5, r7, r2, 0x3733, 0x400}}}, 0x90) 09:10:40 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000000)=[0x4, 0x536, 0x5, 0x9, 0x1, 0x1, 0x24a7, 0x1]) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000440), 0x9, 0x2a583) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000480)={0x7, 0x80, 0x3, 0x7f, 0x1, 0x4b}, 0xc) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x40, 0x8, {{0x2d, 0x4, 0x0, 0x8, 0xb4, 0x65, 0x0, 0x5, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0xa4, 0x3, 0x1, [{@broadcast, 0x15}, {@loopback}, {@multicast1, 0xfffffff8}, {@empty, 0x15c50593}, {@loopback, 0xffffffff}]}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x1, [{@broadcast, 0x5}]}, @ssrr={0x89, 0x23, 0x5, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @local, @private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x19}]}, @end, @end, @ssrr={0x89, 0x23, 0x6c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @multicast1, @local, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x67, 0x3, 0x8, [{@rand_addr=0x64010102, 0x6}, {@empty, 0x1000}, {@local, 0x9}]}, @noop]}}}}}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '#'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080881) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000100)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="62151000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf250300000005000500000000001800040002000000d80000004000000005000000ff0100000500050002000000140001000000000000000000000000000000000005000500030000000800020009000000"], 0x60}}, 0x40010) 09:10:40 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) 09:10:40 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x8, "a98b8547f7cc"}, {0x2, 0xe, "a5aaceb03f777af76f6c8adb"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:40 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async, rerun: 64) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000000)=[0x4, 0x536, 0x5, 0x9, 0x1, 0x1, 0x24a7, 0x1]) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000440), 0x9, 0x2a583) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000480)={0x7, 0x80, 0x3, 0x7f, 0x1, 0x4b}, 0xc) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x40, 0x8, {{0x2d, 0x4, 0x0, 0x8, 0xb4, 0x65, 0x0, 0x5, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0xa4, 0x3, 0x1, [{@broadcast, 0x15}, {@loopback}, {@multicast1, 0xfffffff8}, {@empty, 0x15c50593}, {@loopback, 0xffffffff}]}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x1, [{@broadcast, 0x5}]}, @ssrr={0x89, 0x23, 0x5, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @local, @private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x19}]}, @end, @end, @ssrr={0x89, 0x23, 0x6c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @multicast1, @local, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x67, 0x3, 0x8, [{@rand_addr=0x64010102, 0x6}, {@empty, 0x1000}, {@local, 0x9}]}, @noop]}}}}}) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '#'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080881) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000100)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="62151000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf250300000005000500000000001800040002000000d80000004000000005000000ff0100000500050002000000140001000000000000000000000000000000000005000500030000000800020009000000"], 0x60}}, 0x40010) 09:10:40 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) 09:10:40 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:40 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:40 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async, rerun: 32) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000000)=[0x4, 0x536, 0x5, 0x9, 0x1, 0x1, 0x24a7, 0x1]) (async, rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000000440), 0x9, 0x2a583) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000480)={0x7, 0x80, 0x3, 0x7f, 0x1, 0x4b}, 0xc) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x40, 0x8, {{0x2d, 0x4, 0x0, 0x8, 0xb4, 0x65, 0x0, 0x5, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0xa4, 0x3, 0x1, [{@broadcast, 0x15}, {@loopback}, {@multicast1, 0xfffffff8}, {@empty, 0x15c50593}, {@loopback, 0xffffffff}]}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x1, [{@broadcast, 0x5}]}, @ssrr={0x89, 0x23, 0x5, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @local, @private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x19}]}, @end, @end, @ssrr={0x89, 0x23, 0x6c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @multicast1, @local, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x67, 0x3, 0x8, [{@rand_addr=0x64010102, 0x6}, {@empty, 0x1000}, {@local, 0x9}]}, @noop]}}}}}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '#'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080881) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000100)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="62151000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf250300000005000500000000001800040002000000d80000004000000005000000ff0100000500050002000000140001000000000000000000000000000000000005000500030000000800020009000000"], 0x60}}, 0x40010) 09:10:40 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) 09:10:40 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x60, 0x3, [{0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xf1b5, 0xc000) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000040)={0xc}) 09:10:41 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xf1b5, 0xc000) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000040)={0xc}) 09:10:41 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) 09:10:41 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) 09:10:41 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x60, 0x3, [{0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xf1b5, 0xc000) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000040)={0xc}) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:41 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getuid() openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:41 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x60, 0x3, [{0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:41 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000006500)=ANY=[@ANYBLOB="290000000400000000000000000000000600000000000000030000000000000001000000000000000076ea9ec651b9698963edc7b230a87665aaa47f7879591335b78ae1d20480aa5a17013d7b9d5c23292cedf4ac3a6c11e62a4cc7eec7af0080634920a88fa96282fbba542157f9cf67126c1f31dce1152e9b99f0931ac9c36a26ac0c31e97f50d384ef67f1c6158040b20fc8345d99a04ec01fca0e8fb40f0d293486b1cfc3874b708c63768474532ec30f94c9e7655d5ad8230f6a9cce52b007929abcd01ba9dd6609044b4a7561767db3765b84e6f9aa76f3e9d9c11ebfbf18dc"], 0x29) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) 09:10:41 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) 09:10:41 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x0, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:41 executing program 0: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) 09:10:41 executing program 0: openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x42900, 0x18c) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80000) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '!/):#,+'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x20) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:41 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x0, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:41 executing program 0: openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x42900, 0x18c) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 0: openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x42900, 0x18c) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '!/):#,+'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x20) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '!/):#,+'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x20) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:41 executing program 0: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x0, 0x18c) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x3, 0x0, 0x9f, 0x4, 0xffffffff, 0xfff, {0x5, 0x1, 0x5, 0x491, 0x6ab, 0x0, 0x10000000, 0x80, 0x1, 0x4000, 0x4, r2, 0x0, 0xed6, 0x7}}}, 0x90) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '!/):#,+'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x20) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '!/):#,+'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x20) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:41 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x0, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:41 executing program 0: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x0, 0x0) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) getuid() openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) read$msr(r1, &(0x7f0000000180)=""/4096, 0x1000) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x47, 0x4, 0x2, 0x1, 0x11c, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x68, 0x3, [{0x0, 0x8, "a98b8547f7cc"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:41 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) read$msr(r1, &(0x7f0000000180)=""/4096, 0x1000) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x2}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) read$msr(r1, &(0x7f0000000180)=""/4096, 0x1000) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040927bd7000fddbdf250300000005000600080000000800030008000000080002000000000008009f65ff010000730b1da29478b970eb5a4072740060731e34f9ef3ed77f0d33eb0cdf9f183a89998caea20d2be65aeec63d9e0f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000062c0), &(0x7f0000006300)=0x4) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 1: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040927bd7000fddbdf250300000005000600080000000800030008000000080002000000000008009f65ff010000730b1da29478b970eb5a4072740060731e34f9ef3ed77f0d33eb0cdf9f183a89998caea20d2be65aeec63d9e0f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)) (async) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 09:10:41 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040927bd7000fddbdf250300000005000600080000000800030008000000080002000000000008009f65ff010000730b1da29478b970eb5a4072740060731e34f9ef3ed77f0d33eb0cdf9f183a89998caea20d2be65aeec63d9e0f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 09:10:41 executing program 3: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x2}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:41 executing program 1: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040927bd7000fddbdf250300000005000600080000000800030008000000080002000000000008009f65ff010000730b1da29478b970eb5a4072740060731e34f9ef3ed77f0d33eb0cdf9f183a89998caea20d2be65aeec63d9e0f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040927bd7000fddbdf250300000005000600080000000800030008000000080002000000000008009f65ff010000730b1da29478b970eb5a4072740060731e34f9ef3ed77f0d33eb0cdf9f183a89998caea20d2be65aeec63d9e0f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 09:10:41 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040927bd7000fddbdf250300000005000600080000000800030008000000080002000000000008009f65ff010000730b1da29478b970eb5a4072740060731e34f9ef3ed77f0d33eb0cdf9f183a89998caea20d2be65aeec63d9e0f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 09:10:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a00100027bd7000fbdb00000008000500", @ANYRES32=r1, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x845}, 0x41) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:41 executing program 3: r0 = openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 3: r0 = openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:41 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040927bd7000fddbdf250300000005000600080000000800030008000000080002000000000008009f65ff010000730b1da29478b970eb5a4072740060731e34f9ef3ed77f0d33eb0cdf9f183a89998caea20d2be65aeec63d9e0f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 09:10:42 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040927bd7000fddbdf250300000005000600080000000800030008000000080002000000000008009f65ff010000730b1da29478b970eb5a4072740060731e34f9ef3ed77f0d33eb0cdf9f183a89998caea20d2be65aeec63d9e0f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x45, 0x4, 0x2, 0x1, 0x114, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x62, 0x3, [{0x5, 0x2}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:42 executing program 3: r0 = openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a00100027bd7000fbdb00000008000500", @ANYRES32=r1, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x845}, 0x41) (async) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 3: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000006340), 0x42900, 0x18c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 3: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x42900, 0x18c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a00100027bd7000fbdb00000008000500", @ANYRES32=r1, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x845}, 0x41) (async, rerun: 64) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async, rerun: 64) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 3: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x0, 0x18c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 0: openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x5, "a98b85"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:42 executing program 3: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) socketpair(0x0, 0x4, 0xb6, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 0: openat$iommufd(0xffffff9c, &(0x7f0000000180), 0x200001, 0x0) socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 3: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 0: socketpair(0x29, 0x5, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 3: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000006480)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) socketpair(0x0, 0x4, 0xb6, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 0: socketpair(0x0, 0x5, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 3: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x8044) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x5, "a98b85"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) socketpair(0x0, 0x4, 0xb6, &(0x7f0000000000)) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 3: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 0: socketpair(0x0, 0x5, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 3: openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x5, "a98b85"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:42 executing program 3: openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x1) 09:10:42 executing program 0: socketpair(0x0, 0x5, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x1) 09:10:42 executing program 3: openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x1) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x1) 09:10:42 executing program 0: socketpair(0x29, 0x0, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 3: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 09:10:42 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000000)="ed552f17abd0e037e6", 0x9, 0x75}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 0: socketpair(0x29, 0x0, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x7, "a98b8547f7"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:42 executing program 0: socketpair(0x29, 0x0, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x5, "a98b85"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:42 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000000)="ed552f17abd0e037e6", 0x9, 0x75}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000000)="ed552f17abd0e037e6", 0x9, 0x75}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async) 09:10:42 executing program 0: socketpair(0x29, 0x5, 0x0, &(0x7f0000000100)) 09:10:42 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000000)="ed552f17abd0e037e6", 0x9, 0x75}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 0: socketpair(0x29, 0x5, 0x0, &(0x7f0000000100)) 09:10:42 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:42 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x7, "a98b8547f7"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:42 executing program 0: socketpair(0x29, 0x5, 0x0, &(0x7f0000000100)) 09:10:42 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:42 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) 09:10:42 executing program 0: socketpair(0x29, 0x5, 0xfffffffd, 0x0) 09:10:42 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:42 executing program 0: socketpair(0x29, 0x5, 0xfffffffd, 0x0) 09:10:42 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:42 executing program 0: socketpair(0x29, 0x5, 0xfffffffd, 0x0) 09:10:42 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:42 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x67, 0x3, [{0x5, 0x7, "a98b8547f7"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) 09:10:42 executing program 0: socketpair(0x29, 0x5, 0x0, &(0x7f0000000100)) 09:10:42 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (async) 09:10:42 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:42 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) 09:10:42 executing program 0: socketpair(0x29, 0x5, 0x0, &(0x7f0000000100)) 09:10:42 executing program 0: socketpair(0x29, 0x5, 0x0, &(0x7f0000000100)) 09:10:42 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:42 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '!,'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84d) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:42 executing program 2: socketpair(0x29, 0x0, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 2: socketpair(0x29, 0x0, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000100)) 09:10:42 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:42 executing program 2: socketpair(0x29, 0x0, 0xfffffffd, &(0x7f0000000100)) 09:10:42 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:42 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000100)) 09:10:43 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '!,'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84d) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 2: socketpair(0x0, 0x0, 0xfffffffd, &(0x7f0000000100)) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000100)) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 2: socketpair(0x0, 0x0, 0xfffffffd, &(0x7f0000000100)) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: socketpair(0x29, 0x0, 0x0, &(0x7f0000000100)) 09:10:43 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '!,'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84d) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 2: socketpair(0x0, 0x0, 0xfffffffd, &(0x7f0000000100)) 09:10:43 executing program 0: socketpair(0x29, 0x0, 0x0, &(0x7f0000000100)) 09:10:43 executing program 3: openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: socketpair(0x29, 0x0, 0x0, &(0x7f0000000100)) 09:10:43 executing program 0: socketpair(0x29, 0x5, 0x0, 0x0) 09:10:43 executing program 3: openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000000)=[0x4, 0x8, 0x1, 0x3, 0x122f, 0x2, 0xff, 0x1f]) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 2: socketpair(0x29, 0x0, 0x0, &(0x7f0000000100)) 09:10:43 executing program 0: socketpair(0x29, 0x5, 0x0, 0x0) 09:10:43 executing program 3: openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: socketpair(0x29, 0x5, 0x0, 0x0) 09:10:43 executing program 2: socketpair(0x29, 0x0, 0x0, 0x0) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000000)=[0x4, 0x8, 0x1, 0x3, 0x122f, 0x2, 0xff, 0x1f]) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 2: socketpair(0x29, 0x0, 0x0, 0x0) 09:10:43 executing program 1: openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000000)=[0x4, 0x8, 0x1, 0x3, 0x122f, 0x2, 0xff, 0x1f]) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 0: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 2: socketpair(0x29, 0x0, 0x0, 0x0) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 0: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '!,'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84d) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 0: write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) 09:10:43 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 0: write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) 09:10:43 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '!,'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84d) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 0: r0 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 0: r0 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '!,'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84d) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: r0 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$inet6(r1, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x0, 0x5, 0xfe, 0x4, 0xff, 0x4, 0x200}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '!,'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84d) 09:10:43 executing program 0: openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) socketpair(0xa, 0x800, 0x1, &(0x7f0000000000)) 09:10:43 executing program 0: openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) 09:10:43 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) socketpair(0xa, 0x800, 0x1, &(0x7f0000000000)) (async) socketpair(0xa, 0x800, 0x1, &(0x7f0000000000)) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 3: openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 3: openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) socketpair(0xa, 0x800, 0x1, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) socketpair(0xa, 0x800, 0x1, &(0x7f0000000000)) (async) 09:10:43 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:43 executing program 3: openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 09:10:43 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:43 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$inet6(r0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 2: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:43 executing program 1: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 09:10:43 executing program 3: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 09:10:43 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:43 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 09:10:43 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '!,'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84d) 09:10:43 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:43 executing program 1: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 09:10:43 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 09:10:43 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:43 executing program 1: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x1}, 0xe) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', r3, 0x700, 0x7800, 0x200, 0x81, {{0x1b, 0x4, 0x1, 0x5, 0x6c, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @remote, {[@cipso={0x86, 0xe, 0x1, [{0x7, 0x8, "0612c219b2ab"}]}, @generic={0x89, 0x8, "442e50c08a60"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x2a, [@multicast2, @multicast1]}, @timestamp={0x44, 0x1c, 0x7c, 0x0, 0xb, [0xd9f, 0x1, 0x1, 0x2, 0x83, 0x8001]}, @timestamp={0x44, 0x14, 0xe1, 0x0, 0x1, [0xffffffff, 0x81, 0x6, 0x1]}]}}}}}) 09:10:44 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '!,'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84d) 09:10:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 2: openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 2: openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x1}, 0xe) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', r3, 0x700, 0x7800, 0x200, 0x81, {{0x1b, 0x4, 0x1, 0x5, 0x6c, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @remote, {[@cipso={0x86, 0xe, 0x1, [{0x7, 0x8, "0612c219b2ab"}]}, @generic={0x89, 0x8, "442e50c08a60"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x2a, [@multicast2, @multicast1]}, @timestamp={0x44, 0x1c, 0x7c, 0x0, 0xb, [0xd9f, 0x1, 0x1, 0x2, 0x83, 0x8001]}, @timestamp={0x44, 0x14, 0xe1, 0x0, 0x1, [0xffffffff, 0x81, 0x6, 0x1]}]}}}}}) 09:10:44 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '!,'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84d) 09:10:44 executing program 2: openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 09:10:44 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 09:10:44 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x1}, 0xe) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', r3, 0x700, 0x7800, 0x200, 0x81, {{0x1b, 0x4, 0x1, 0x5, 0x6c, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @remote, {[@cipso={0x86, 0xe, 0x1, [{0x7, 0x8, "0612c219b2ab"}]}, @generic={0x89, 0x8, "442e50c08a60"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x2a, [@multicast2, @multicast1]}, @timestamp={0x44, 0x1c, 0x7c, 0x0, 0xb, [0xd9f, 0x1, 0x1, 0x2, 0x83, 0x8001]}, @timestamp={0x44, 0x14, 0xe1, 0x0, 0x1, [0xffffffff, 0x81, 0x6, 0x1]}]}}}}}) 09:10:44 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0xb01) 09:10:44 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 09:10:44 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x80, 0xa4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x80, 0xa4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 09:10:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x80, 0xa4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 09:10:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000100)={0xa, 0x4e22, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000140)="3d2bfcafab0b6c7798e55fdc256fe7f361189daa1ba072f36de3b96cfc56f6efa075769fa6758391ec7c875731cbfdcae6f14ab3cf1f5b189034d675d50f14204fc29b1daf5cd9c1695893baf485585e0bc6a72397e137d64c3f0f9cbb76fc7a1729fa78b94f21dee1156499b374a28c27ee8c1d40c11cb9f64c87c9d48ab7d582a68cae721a4c60988d87459de0e00c22131a4a2a4bac5b1536dac81aadb9e13c3ab30cdcf5e258f33a0283a0379850f6aeb39dd2a899b89bc7e37da0a341a1e2a91d7560c8379f6d023386eb019b9610b589cde90677", 0xd7}, {&(0x7f0000000240)="b40c19c6af1c161cda7d01f8ec15ea1a594a06090821edc823a9e1819558e941d235c3a342", 0x25}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="400e1866d408bd034f9e2815510056626c2dad6776c0132980448c571406bb65f95383ed0ff920d7b82efaf2776b4a894d7ec5ea878b0c5415f0f5592c9d498352f65466a98018f98000ccb6e6fc8b7b49ddcd9e47d11702762ff834d3cf5768a14d926372008a22a85314d438f25126028c718405643ae0f3e7d93d26f5f91bf26c243794ac50c6a24621aaf72e1caeca50df2b6ca6b86adf0fac78c54f09c803224549fa8fef9b9d77d5e33bce30e042cd04cb76ca", 0xb6}, {&(0x7f0000001340)="fb7aa6a133a90ff9221e1ee5b255f38d8aabc964c7d4ac22b5d8c1e9d3a02dc972a92f1d05fcfff348bf16e5de7cdc163a1952625dd5d0e67e7b364c53fdbe9f544b3535713cdc2d851b02d12d2bbffc944981b37abec7aa3bbbb82d3192954a658e71488ca14eab3b18a6f80fa24ec4bc780565ee3ea4dec3a6ef2b8563aff25fdf0e73f2d0b2a5d3c8c007ff3770db4e44a1cd0b9cceb3abcd59e8f15f7e55989d6a4bac7ccfc57e7fb5d68a51cf18a4234d50d613934418462c6b3fa18e44c9a85f34fd4798a76f21ea36ddf6531ba869b15810050e2c8797e33c2eb74291dde1cf886a4e3ccf4113b5", 0xeb}, {&(0x7f0000001440)="ea3d7d32e3c4b1cace34fa2f3a77cdff22dbb967fca11d25c18ec07c454da9b85b9bfe79305a288384453a8f3e280d5ad194a2ba3733ba82b9e61e1b19657f54563b24aad143570bee5ba581219cd4b1473d57b09c5e8aea4811956ed83545", 0x5f}, {&(0x7f00000014c0)="74f5e06e7e2b38faf4136d19378cdaa7702076649264fd78a9e52176161d1c", 0x1f}, {&(0x7f0000001500)="46df9909417c95eb2da9f9ea9c2bc80ceac3ab6b7836a2035f9d7fa1f3b8068000dedd21868f995d2d52eaf79adf86df6d8d2dc1dcddcc11a261a6f5af1d7eaeee6aa20ee8fc73e6f576eab4d113a5fb37540b3b0ce6c70556258b1659bd3ebc1fca7e8795166c5aa87543310c431102954fa294580481ee4063542838435e94c7cb13e6971a9cdf5a8730abd61a35", 0x8f}], 0x8, &(0x7f0000001600)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x7fffffff}}], 0x10}, 0x20000800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x33}, 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80000) r2 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x200) accept4$alg(r2, 0x0, 0x0, 0x80800) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000100)={0xa, 0x4e22, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000140)="3d2bfcafab0b6c7798e55fdc256fe7f361189daa1ba072f36de3b96cfc56f6efa075769fa6758391ec7c875731cbfdcae6f14ab3cf1f5b189034d675d50f14204fc29b1daf5cd9c1695893baf485585e0bc6a72397e137d64c3f0f9cbb76fc7a1729fa78b94f21dee1156499b374a28c27ee8c1d40c11cb9f64c87c9d48ab7d582a68cae721a4c60988d87459de0e00c22131a4a2a4bac5b1536dac81aadb9e13c3ab30cdcf5e258f33a0283a0379850f6aeb39dd2a899b89bc7e37da0a341a1e2a91d7560c8379f6d023386eb019b9610b589cde90677", 0xd7}, {&(0x7f0000000240)="b40c19c6af1c161cda7d01f8ec15ea1a594a06090821edc823a9e1819558e941d235c3a342", 0x25}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="400e1866d408bd034f9e2815510056626c2dad6776c0132980448c571406bb65f95383ed0ff920d7b82efaf2776b4a894d7ec5ea878b0c5415f0f5592c9d498352f65466a98018f98000ccb6e6fc8b7b49ddcd9e47d11702762ff834d3cf5768a14d926372008a22a85314d438f25126028c718405643ae0f3e7d93d26f5f91bf26c243794ac50c6a24621aaf72e1caeca50df2b6ca6b86adf0fac78c54f09c803224549fa8fef9b9d77d5e33bce30e042cd04cb76ca", 0xb6}, {&(0x7f0000001340)="fb7aa6a133a90ff9221e1ee5b255f38d8aabc964c7d4ac22b5d8c1e9d3a02dc972a92f1d05fcfff348bf16e5de7cdc163a1952625dd5d0e67e7b364c53fdbe9f544b3535713cdc2d851b02d12d2bbffc944981b37abec7aa3bbbb82d3192954a658e71488ca14eab3b18a6f80fa24ec4bc780565ee3ea4dec3a6ef2b8563aff25fdf0e73f2d0b2a5d3c8c007ff3770db4e44a1cd0b9cceb3abcd59e8f15f7e55989d6a4bac7ccfc57e7fb5d68a51cf18a4234d50d613934418462c6b3fa18e44c9a85f34fd4798a76f21ea36ddf6531ba869b15810050e2c8797e33c2eb74291dde1cf886a4e3ccf4113b5", 0xeb}, {&(0x7f0000001440)="ea3d7d32e3c4b1cace34fa2f3a77cdff22dbb967fca11d25c18ec07c454da9b85b9bfe79305a288384453a8f3e280d5ad194a2ba3733ba82b9e61e1b19657f54563b24aad143570bee5ba581219cd4b1473d57b09c5e8aea4811956ed83545", 0x5f}, {&(0x7f00000014c0)="74f5e06e7e2b38faf4136d19378cdaa7702076649264fd78a9e52176161d1c", 0x1f}, {&(0x7f0000001500)="46df9909417c95eb2da9f9ea9c2bc80ceac3ab6b7836a2035f9d7fa1f3b8068000dedd21868f995d2d52eaf79adf86df6d8d2dc1dcddcc11a261a6f5af1d7eaeee6aa20ee8fc73e6f576eab4d113a5fb37540b3b0ce6c70556258b1659bd3ebc1fca7e8795166c5aa87543310c431102954fa294580481ee4063542838435e94c7cb13e6971a9cdf5a8730abd61a35", 0x8f}], 0x8, &(0x7f0000001600)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x7fffffff}}], 0x10}, 0x20000800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x33}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x33}, 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80000) r2 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x200) accept4$alg(r2, 0x0, 0x0, 0x80800) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) 09:10:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000100)={0xa, 0x4e22, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000140)="3d2bfcafab0b6c7798e55fdc256fe7f361189daa1ba072f36de3b96cfc56f6efa075769fa6758391ec7c875731cbfdcae6f14ab3cf1f5b189034d675d50f14204fc29b1daf5cd9c1695893baf485585e0bc6a72397e137d64c3f0f9cbb76fc7a1729fa78b94f21dee1156499b374a28c27ee8c1d40c11cb9f64c87c9d48ab7d582a68cae721a4c60988d87459de0e00c22131a4a2a4bac5b1536dac81aadb9e13c3ab30cdcf5e258f33a0283a0379850f6aeb39dd2a899b89bc7e37da0a341a1e2a91d7560c8379f6d023386eb019b9610b589cde90677", 0xd7}, {&(0x7f0000000240)="b40c19c6af1c161cda7d01f8ec15ea1a594a06090821edc823a9e1819558e941d235c3a342", 0x25}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="400e1866d408bd034f9e2815510056626c2dad6776c0132980448c571406bb65f95383ed0ff920d7b82efaf2776b4a894d7ec5ea878b0c5415f0f5592c9d498352f65466a98018f98000ccb6e6fc8b7b49ddcd9e47d11702762ff834d3cf5768a14d926372008a22a85314d438f25126028c718405643ae0f3e7d93d26f5f91bf26c243794ac50c6a24621aaf72e1caeca50df2b6ca6b86adf0fac78c54f09c803224549fa8fef9b9d77d5e33bce30e042cd04cb76ca", 0xb6}, {&(0x7f0000001340)="fb7aa6a133a90ff9221e1ee5b255f38d8aabc964c7d4ac22b5d8c1e9d3a02dc972a92f1d05fcfff348bf16e5de7cdc163a1952625dd5d0e67e7b364c53fdbe9f544b3535713cdc2d851b02d12d2bbffc944981b37abec7aa3bbbb82d3192954a658e71488ca14eab3b18a6f80fa24ec4bc780565ee3ea4dec3a6ef2b8563aff25fdf0e73f2d0b2a5d3c8c007ff3770db4e44a1cd0b9cceb3abcd59e8f15f7e55989d6a4bac7ccfc57e7fb5d68a51cf18a4234d50d613934418462c6b3fa18e44c9a85f34fd4798a76f21ea36ddf6531ba869b15810050e2c8797e33c2eb74291dde1cf886a4e3ccf4113b5", 0xeb}, {&(0x7f0000001440)="ea3d7d32e3c4b1cace34fa2f3a77cdff22dbb967fca11d25c18ec07c454da9b85b9bfe79305a288384453a8f3e280d5ad194a2ba3733ba82b9e61e1b19657f54563b24aad143570bee5ba581219cd4b1473d57b09c5e8aea4811956ed83545", 0x5f}, {&(0x7f00000014c0)="74f5e06e7e2b38faf4136d19378cdaa7702076649264fd78a9e52176161d1c", 0x1f}, {&(0x7f0000001500)="46df9909417c95eb2da9f9ea9c2bc80ceac3ab6b7836a2035f9d7fa1f3b8068000dedd21868f995d2d52eaf79adf86df6d8d2dc1dcddcc11a261a6f5af1d7eaeee6aa20ee8fc73e6f576eab4d113a5fb37540b3b0ce6c70556258b1659bd3ebc1fca7e8795166c5aa87543310c431102954fa294580481ee4063542838435e94c7cb13e6971a9cdf5a8730abd61a35", 0x8f}], 0x8, &(0x7f0000001600)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x7fffffff}}], 0x10}, 0x20000800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x33}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x33}, 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80000) r2 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x200) accept4$alg(r2, 0x0, 0x0, 0x80800) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) (async) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) 09:10:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) (async) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) (async) 09:10:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) 09:10:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) 09:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) 09:10:44 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 3: openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) 09:10:44 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 3: openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) 09:10:44 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x8, 0x81, 0x1a1, 0x7, 0x9, 0x8, 0x1ff}, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040)=0x40, 0x4) 09:10:44 executing program 3: openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) 09:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) 09:10:44 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x8, 0x81, 0x1a1, 0x7, 0x9, 0x8, 0x1ff}, 0xc) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040)=0x40, 0x4) 09:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 09:10:44 executing program 2: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) 09:10:44 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x8, 0x81, 0x1a1, 0x7, 0x9, 0x8, 0x1ff}, 0xc) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040)=0x40, 0x4) [ 141.014609][ T62] Bluetooth: hci3: command 0x0405 tx timeout 09:10:44 executing program 2: openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x281, 0x21) 09:10:44 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) 09:10:44 executing program 3: openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 2: openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x281, 0x21) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 09:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) 09:10:44 executing program 2: openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x281, 0x21) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000100)={0xa, 0x4e22, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000140)="3d2bfcafab0b6c7798e55fdc256fe7f361189daa1ba072f36de3b96cfc56f6efa075769fa6758391ec7c875731cbfdcae6f14ab3cf1f5b189034d675d50f14204fc29b1daf5cd9c1695893baf485585e0bc6a72397e137d64c3f0f9cbb76fc7a1729fa78b94f21dee1156499b374a28c27ee8c1d40c11cb9f64c87c9d48ab7d582a68cae721a4c60988d87459de0e00c22131a4a2a4bac5b1536dac81aadb9e13c3ab30cdcf5e258f33a0283a0379850f6aeb39dd2a899b89bc7e37da0a341a1e2a91d7560c8379f6d023386eb019b9610b589cde90677", 0xd7}, {&(0x7f0000000240)="b40c19c6af1c161cda7d01f8ec15ea1a594a06090821edc823a9e1819558e941d235c3a342", 0x25}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="400e1866d408bd034f9e2815510056626c2dad6776c0132980448c571406bb65f95383ed0ff920d7b82efaf2776b4a894d7ec5ea878b0c5415f0f5592c9d498352f65466a98018f98000ccb6e6fc8b7b49ddcd9e47d11702762ff834d3cf5768a14d926372008a22a85314d438f25126028c718405643ae0f3e7d93d26f5f91bf26c243794ac50c6a24621aaf72e1caeca50df2b6ca6b86adf0fac78c54f09c803224549fa8fef9b9d77d5e33bce30e042cd04cb76ca", 0xb6}, {&(0x7f0000001340)="fb7aa6a133a90ff9221e1ee5b255f38d8aabc964c7d4ac22b5d8c1e9d3a02dc972a92f1d05fcfff348bf16e5de7cdc163a1952625dd5d0e67e7b364c53fdbe9f544b3535713cdc2d851b02d12d2bbffc944981b37abec7aa3bbbb82d3192954a658e71488ca14eab3b18a6f80fa24ec4bc780565ee3ea4dec3a6ef2b8563aff25fdf0e73f2d0b2a5d3c8c007ff3770db4e44a1cd0b9cceb3abcd59e8f15f7e55989d6a4bac7ccfc57e7fb5d68a51cf18a4234d50d613934418462c6b3fa18e44c9a85f34fd4798a76f21ea36ddf6531ba869b15810050e2c8797e33c2eb74291dde1cf886a4e3ccf4113b5", 0xeb}, {&(0x7f0000001440)="ea3d7d32e3c4b1cace34fa2f3a77cdff22dbb967fca11d25c18ec07c454da9b85b9bfe79305a288384453a8f3e280d5ad194a2ba3733ba82b9e61e1b19657f54563b24aad143570bee5ba581219cd4b1473d57b09c5e8aea4811956ed83545", 0x5f}, {&(0x7f00000014c0)="74f5e06e7e2b38faf4136d19378cdaa7702076649264fd78a9e52176161d1c", 0x1f}, {&(0x7f0000001500)="46df9909417c95eb2da9f9ea9c2bc80ceac3ab6b7836a2035f9d7fa1f3b8068000dedd21868f995d2d52eaf79adf86df6d8d2dc1dcddcc11a261a6f5af1d7eaeee6aa20ee8fc73e6f576eab4d113a5fb37540b3b0ce6c70556258b1659bd3ebc1fca7e8795166c5aa87543310c431102954fa294580481ee4063542838435e94c7cb13e6971a9cdf5a8730abd61a35", 0x8f}], 0x8, &(0x7f0000001600)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x7fffffff}}], 0x10}, 0x20000800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x33}, 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80000) r2 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x200) accept4$alg(r2, 0x0, 0x0, 0x80800) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) 09:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) 09:10:44 executing program 2: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x0, 0x21) 09:10:44 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c000b93f", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf250900000005002a000000000005002f0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}}, 0x44000) 09:10:44 executing program 2: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x0, 0x21) 09:10:44 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x80000) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) 09:10:44 executing program 2: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x0, 0x21) 09:10:44 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c000b93f", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf250900000005002a000000000005002f0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}}, 0x44000) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c000b93f", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf250900000005002a000000000005002f0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}}, 0x44000) (async) 09:10:44 executing program 3: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c000b93f", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf250900000005002a000000000005002f0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async, rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 32) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}}, 0x44000) 09:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) 09:10:44 executing program 2: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x0) 09:10:44 executing program 3: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 0: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x21) 09:10:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 0: openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x281, 0x21) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 3: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48005) r2 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x46, 0x4, 0x2, 0x1, 0x118, 0x67, 0x0, 0x33, 0x4, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x65, 0x3, [{0x5, 0x5, "a98b85"}, {0x2, 0xf, "a5aaceb03f777af76f6c8adb89"}, {0x7, 0x6, "0091fdf1"}, {0x6, 0x12, "608523b0bc0676ed82f4cb2de67ab224"}, {0x5, 0x2}, {0x0, 0xe, "cbcc6d119d1ffdedbbf27532"}, {0x7, 0xf, "42e3b40040020cd68a59a0dc66"}, {0x2, 0x10, "6d7576684a03de857d8e1b921887"}, {0x0, 0x4, "0e82"}]}, @timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x0, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfffffffa}, {@loopback, 0xed}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x2}, {0x0, 0x4, "0f2e"}, {0x1, 0x5, "a0bfdc"}, {0x1, 0xa, "eb13abeb241e5514"}, {0x0, 0x4, "7efa"}, {0x1, 0xe, "1fbbb58765dab0043b7da80d"}, {0x5, 0xb, "298ac9cb9b7dd9691b"}, {0x7, 0x6, "6956afea"}]}, @rr={0x7, 0x7, 0xca, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@private, 0x6}, {@loopback, 0xfffffc01}, {@multicast1, 0x3d6}, {@multicast1}, {@loopback, 0x9}]}, @lsrr={0x83, 0x7, 0x30, [@dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) 09:10:44 executing program 3: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 0: openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x281, 0x21) 09:10:44 executing program 3: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:44 executing program 0: openat$damon_kdamond_pid(0xffffff9c, 0x0, 0x281, 0x21) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 3: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) socketpair(0x0, 0x4, 0xb6, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:44 executing program 0: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x0, 0x21) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12100024}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4004081) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) 09:10:44 executing program 3: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc2375e211f41edbf}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:44 executing program 3: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x9d, &(0x7f0000000000)=0x8001}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12100024}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4004081) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) 09:10:44 executing program 0: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x0, 0x21) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) socketpair(0x0, 0x4, 0xb6, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:45 executing program 0: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x0, 0x21) 09:10:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12100024}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4004081) (async) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) 09:10:45 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:45 executing program 0: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x281, 0x0) 09:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) socketpair(0x0, 0x4, 0xb6, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:45 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) 09:10:45 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:45 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) 09:10:45 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) (async) 09:10:45 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) socketpair(0x0, 0x4, 0xb6, &(0x7f0000000000)) 09:10:45 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) 09:10:45 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:45 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 09:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff7, 0x2}, 0xe) 09:10:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) (async) 09:10:45 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 09:10:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 09:10:45 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 09:10:45 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) socketpair(0x2, 0x6, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x10008810}, 0x800) 09:10:45 executing program 2: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 09:10:45 executing program 2: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 2: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7, 0x2}, 0xe) 09:10:45 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) socketpair(0x2, 0x6, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x10008810}, 0x800) 09:10:45 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20000001) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 09:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 09:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 0: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 09:10:45 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) socketpair(0x2, 0x6, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x10008810}, 0x800) 09:10:45 executing program 0: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:45 executing program 0: r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) 09:10:45 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 09:10:45 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffe30) 09:10:45 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 09:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 09:10:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 09:10:46 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffe30) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffe30) 09:10:46 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 09:10:46 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0) 09:10:46 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffe30) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffe30) (async) 09:10:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:46 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0) 09:10:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:47 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0) 09:10:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) [ 143.744094][ T62] Bluetooth: hci3: command 0x0405 tx timeout 09:10:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:47 executing program 1: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:47 executing program 1: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:47 executing program 1: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 09:10:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:48 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 09:10:48 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 09:10:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:49 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), 0x4) 09:10:49 executing program 3: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 09:10:49 executing program 3: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 09:10:49 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 09:10:49 executing program 3: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 09:10:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) [ 146.536846][ T5207] ================================================================== [ 146.540370][ T5207] BUG: KASAN: slab-use-after-free in hci_send_acl+0xeb7/0x1050 [ 146.543210][ T5207] Read of size 8 at addr ffff8880612eca18 by task kworker/3:4/5207 [ 146.546589][ T5207] [ 146.547644][ T5207] CPU: 3 PID: 5207 Comm: kworker/3:4 Not tainted 6.6.0-syzkaller #0 [ 146.551126][ T5207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 146.556502][ T5207] Workqueue: events l2cap_info_timeout [ 146.558520][ T5207] Call Trace: [ 146.559730][ T5207] [ 146.560796][ T5207] dump_stack_lvl+0xd9/0x1b0 [ 146.562485][ T5207] print_report+0xc4/0x620 [ 146.564090][ T5207] ? __virt_addr_valid+0x5e/0x2d0 [ 146.565962][ T5207] ? __phys_addr+0xc6/0x140 [ 146.567838][ T5207] kasan_report+0xda/0x110 [ 146.569613][ T5207] ? hci_send_acl+0xeb7/0x1050 [ 146.571341][ T5207] ? hci_send_acl+0xeb7/0x1050 [ 146.573090][ T5207] hci_send_acl+0xeb7/0x1050 [ 146.574729][ T5207] ? __napi_build_skb+0x50/0x50 [ 146.576503][ T5207] ? __mutex_unlock_slowpath+0x165/0x640 [ 146.578600][ T5207] ? bit_wait_io_timeout+0x160/0x160 [ 146.580570][ T5207] l2cap_send_cmd+0x6dd/0x920 [ 146.582328][ T5207] l2cap_send_conn_req+0x1e5/0x260 [ 146.584146][ T5207] ? l2cap_connect+0x1280/0x1280 [ 146.585952][ T5207] l2cap_start_connection+0x11e/0x420 [ 146.587867][ T5207] l2cap_conn_start+0x7ae/0xa40 [ 146.589656][ T5207] ? l2cap_chan_timeout+0x2f0/0x2f0 [ 146.591545][ T5207] ? lock_sync+0x190/0x190 [ 146.593151][ T5207] ? lock_sync+0x190/0x190 [ 146.594765][ T5207] ? reacquire_held_locks+0x4b0/0x4b0 [ 146.596690][ T5207] process_one_work+0x884/0x15c0 [ 146.598518][ T5207] ? lock_sync+0x190/0x190 [ 146.600168][ T5207] ? init_worker_pool+0x770/0x770 [ 146.602008][ T5207] ? assign_work+0x1a0/0x240 [ 146.603715][ T5207] worker_thread+0x8b9/0x1290 [ 146.605423][ T5207] ? __kthread_parkme+0x14b/0x220 [ 146.607236][ T5207] ? process_one_work+0x15c0/0x15c0 [ 146.609319][ T5207] kthread+0x33c/0x440 [ 146.610857][ T5207] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.612731][ T5207] ? kthread_complete_and_exit+0x40/0x40 [ 146.614772][ T5207] ret_from_fork+0x45/0x80 [ 146.616405][ T5207] ? kthread_complete_and_exit+0x40/0x40 [ 146.618455][ T5207] ret_from_fork_asm+0x11/0x20 [ 146.620217][ T5207] [ 146.621348][ T5207] [ 146.622224][ T5207] Allocated by task 19851: [ 146.623804][ T5207] kasan_save_stack+0x33/0x50 [ 146.625523][ T5207] kasan_set_track+0x25/0x30 [ 146.627206][ T5207] __kasan_kmalloc+0xa2/0xb0 [ 146.628957][ T5207] hci_chan_create+0xa6/0x3d0 [ 146.630645][ T5207] l2cap_conn_add.part.0+0x1a/0xdf0 [ 146.632558][ T5207] l2cap_chan_connect+0x15de/0x2170 [ 146.634462][ T5207] lowpan_control_write+0x3d6/0x730 [ 146.636317][ T5207] full_proxy_write+0x124/0x190 [ 146.638109][ T5207] vfs_write+0x2a4/0xe40 [ 146.639668][ T5207] ksys_write+0x12f/0x250 [ 146.641265][ T5207] __do_fast_syscall_32+0x61/0xe0 [ 146.643057][ T5207] do_fast_syscall_32+0x33/0x70 [ 146.644825][ T5207] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 146.647110][ T5207] [ 146.647990][ T5207] Freed by task 62: [ 146.649428][ T5207] kasan_save_stack+0x33/0x50 [ 146.651184][ T5207] kasan_set_track+0x25/0x30 [ 146.652924][ T5207] kasan_save_free_info+0x2b/0x40 [ 146.654778][ T5207] ____kasan_slab_free+0x15b/0x1b0 [ 146.656614][ T5207] slab_free_freelist_hook+0x114/0x1e0 [ 146.658628][ T5207] __kmem_cache_free+0xb8/0x2f0 [ 146.660450][ T5207] hci_chan_list_flush+0x81/0xf0 [ 146.662139][ T5207] hci_conn_del+0x201/0xd80 [ 146.663768][ T5207] hci_abort_conn_sync+0x573/0xe10 [ 146.665641][ T5207] abort_conn_sync+0x187/0x390 [ 146.667379][ T5207] hci_cmd_sync_work+0x1a4/0x410 [ 146.669143][ T5207] process_one_work+0x884/0x15c0 [ 146.670955][ T5207] worker_thread+0x8b9/0x1290 [ 146.672645][ T5207] kthread+0x33c/0x440 [ 146.674156][ T5207] ret_from_fork+0x45/0x80 [ 146.675734][ T5207] ret_from_fork_asm+0x11/0x20 [ 146.677471][ T5207] [ 146.678342][ T5207] Last potentially related work creation: [ 146.680357][ T5207] kasan_save_stack+0x33/0x50 [ 146.682043][ T5207] __kasan_record_aux_stack+0xbc/0xd0 [ 146.683964][ T5207] kvfree_call_rcu+0x70/0xbe0 [ 146.685630][ T5207] kernfs_unlink_open_file+0x3b6/0x4b0 [ 146.687556][ T5207] kernfs_fop_release+0xec/0x1e0 [ 146.689571][ T5207] __fput+0x3f7/0xa70 [ 146.691082][ T5207] __fput_sync+0x47/0x50 [ 146.692615][ T5207] __x64_sys_close+0x87/0xf0 [ 146.694308][ T5207] do_syscall_64+0x38/0xb0 [ 146.695911][ T5207] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.698057][ T5207] [ 146.698908][ T5207] Second to last potentially related work creation: [ 146.701248][ T5207] kasan_save_stack+0x33/0x50 [ 146.702931][ T5207] __kasan_record_aux_stack+0xbc/0xd0 [ 146.704837][ T5207] kvfree_call_rcu+0x70/0xbe0 [ 146.706535][ T5207] kernfs_unlink_open_file+0x3b6/0x4b0 [ 146.708544][ T5207] kernfs_fop_release+0xec/0x1e0 [ 146.710386][ T5207] __fput+0x3f7/0xa70 [ 146.711857][ T5207] __fput_sync+0x47/0x50 [ 146.713427][ T5207] __x64_sys_close+0x87/0xf0 [ 146.715075][ T5207] do_syscall_64+0x38/0xb0 [ 146.716768][ T5207] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.719004][ T5207] [ 146.719885][ T5207] The buggy address belongs to the object at ffff8880612eca00 [ 146.719885][ T5207] which belongs to the cache kmalloc-128 of size 128 [ 146.724989][ T5207] The buggy address is located 24 bytes inside of [ 146.724989][ T5207] freed 128-byte region [ffff8880612eca00, ffff8880612eca80) [ 146.730339][ T5207] [ 146.731206][ T5207] The buggy address belongs to the physical page: [ 146.733412][ T5207] page:ffffea000184bb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880612ec800 pfn:0x612ec [ 146.737339][ T5207] flags: 0x4fff00000000800(slab|node=1|zone=1|lastcpupid=0x7ff) [ 146.739958][ T5207] page_type: 0xffffffff() [ 146.741499][ T5207] raw: 04fff00000000800 ffff888012c428c0 ffffea000184bc50 ffffea00018a4410 [ 146.744520][ T5207] raw: ffff8880612ec800 0000000000100006 00000001ffffffff 0000000000000000 [ 146.747710][ T5207] page dumped because: kasan: bad access detected [ 146.750361][ T5207] page_owner tracks the page as allocated [ 146.752351][ T5207] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5161, tgid 5161 (syz-executor.2), ts 52955962301, free_ts 52955915278 [ 146.758664][ T5207] post_alloc_hook+0x2cf/0x340 [ 146.760365][ T5207] get_page_from_freelist+0xee0/0x2f20 [ 146.762271][ T5207] __alloc_pages+0x1d0/0x4a0 [ 146.763887][ T5207] allocate_slab+0xa1/0x380 [ 146.765505][ T5207] ___slab_alloc+0x8c7/0x1580 [ 146.767288][ T5207] __slab_alloc.constprop.0+0x56/0xa0 [ 146.769718][ T5207] __kmem_cache_alloc_node+0x131/0x340 [ 146.771679][ T5207] __kmalloc_node+0x52/0x110 [ 146.773324][ T5207] memcg_alloc_slab_cgroups+0xa9/0x170 [ 146.775222][ T5207] memcg_slab_post_alloc_hook+0xaa/0x390 [ 146.777231][ T5207] __kmem_cache_alloc_node+0x1cb/0x340 [ 146.779183][ T5207] __kmalloc_node+0x52/0x110 [ 146.780792][ T5207] kvmalloc_node+0x99/0x1a0 [ 146.782411][ T5207] xt_alloc_table_info+0x3e/0xa0 [ 146.784145][ T5207] compat_do_replace.constprop.0+0x1a2/0x4b0 [ 146.786226][ T5207] do_ip6t_set_ctl+0x5e4/0xbc0 [ 146.787991][ T5207] page last free stack trace: [ 146.789661][ T5207] free_unref_page_prepare+0x476/0xa40 [ 146.791587][ T5207] free_unref_page+0x33/0x3b0 [ 146.793236][ T5207] vfree+0x181/0x7a0 [ 146.794632][ T5207] xt_compat_flush_offsets+0x8f/0x160 [ 146.796518][ T5207] compat_get_entries+0x234/0x850 [ 146.798312][ T5207] do_ip6t_get_ctl+0x569/0xab0 [ 146.800003][ T5207] nf_getsockopt+0x76/0xe0 [ 146.801576][ T5207] ipv6_getsockopt+0x1f9/0x2b0 [ 146.803252][ T5207] tcp_getsockopt+0x97/0xf0 [ 146.804830][ T5207] __sys_getsockopt+0x220/0x6a0 [ 146.806565][ T5207] __do_compat_sys_socketcall+0x428/0x700 [ 146.808547][ T5207] __do_fast_syscall_32+0x61/0xe0 [ 146.810304][ T5207] do_fast_syscall_32+0x33/0x70 [ 146.812047][ T5207] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 146.814197][ T5207] 09:10:50 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) [ 146.814982][ T5207] Memory state around the buggy address: 09:10:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) [ 146.817141][ T5207] ffff8880612ec900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 146.820085][ T5207] ffff8880612ec980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.822943][ T5207] >ffff8880612eca00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.825809][ T5207] ^ 09:10:50 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) 09:10:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) [ 146.827591][ T5207] ffff8880612eca80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.830718][ T5207] ffff8880612ecb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.833744][ T5207] ================================================================== 09:10:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 09:10:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 09:10:50 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) [ 146.844009][ T5207] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.847096][ T5207] CPU: 3 PID: 5207 Comm: kworker/3:4 Not tainted 6.6.0-syzkaller #0 [ 146.850099][ T5207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 09:10:50 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) [ 146.853801][ T5207] Workqueue: events l2cap_info_timeout [ 146.855960][ T5207] Call Trace: [ 146.857231][ T5207] [ 146.858297][ T5207] dump_stack_lvl+0xd9/0x1b0 [ 146.859991][ T5207] panic+0x6a6/0x750 [ 146.861454][ T5207] ? panic_smp_self_stop+0xa0/0xa0 [ 146.863284][ T5207] ? preempt_schedule_thunk+0x1a/0x30 [ 146.865202][ T5207] ? preempt_schedule_common+0x45/0xc0 [ 146.867184][ T5207] check_panic_on_warn+0xab/0xb0 [ 146.868974][ T5207] end_report+0x108/0x150 [ 146.870577][ T5207] kasan_report+0xea/0x110 [ 146.872522][ T5207] ? hci_send_acl+0xeb7/0x1050 [ 146.874579][ T5207] ? hci_send_acl+0xeb7/0x1050 [ 146.876787][ T5207] hci_send_acl+0xeb7/0x1050 [ 146.878965][ T5207] ? __napi_build_skb+0x50/0x50 [ 146.881062][ T5207] ? __mutex_unlock_slowpath+0x165/0x640 [ 146.883652][ T5207] ? bit_wait_io_timeout+0x160/0x160 [ 146.886080][ T5207] l2cap_send_cmd+0x6dd/0x920 [ 146.888118][ T5207] l2cap_send_conn_req+0x1e5/0x260 [ 146.890329][ T5207] ? l2cap_connect+0x1280/0x1280 [ 146.892544][ T5207] l2cap_start_connection+0x11e/0x420 [ 146.894940][ T5207] l2cap_conn_start+0x7ae/0xa40 [ 146.897275][ T5207] ? l2cap_chan_timeout+0x2f0/0x2f0 09:10:50 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 09:10:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) [ 146.899529][ T5207] ? lock_sync+0x190/0x190 [ 146.901676][ T5207] ? lock_sync+0x190/0x190 [ 146.903594][ T5207] ? reacquire_held_locks+0x4b0/0x4b0 [ 146.905900][ T5207] process_one_work+0x884/0x15c0 [ 146.908104][ T5207] ? lock_sync+0x190/0x190 09:10:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0xfff7}, 0xe) [ 146.910026][ T5207] ? init_worker_pool+0x770/0x770 [ 146.912425][ T5207] ? assign_work+0x1a0/0x240 [ 146.914425][ T5207] worker_thread+0x8b9/0x1290 [ 146.916449][ T5207] ? __kthread_parkme+0x14b/0x220 [ 146.918631][ T5207] ? process_one_work+0x15c0/0x15c0 09:10:50 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) [ 146.920864][ T5207] kthread+0x33c/0x440 [ 146.922839][ T5207] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.925086][ T5207] ? kthread_complete_and_exit+0x40/0x40 [ 146.927486][ T5207] ret_from_fork+0x45/0x80 [ 146.929420][ T5207] ? kthread_complete_and_exit+0x40/0x40 [ 146.931853][ T5207] ret_from_fork_asm+0x11/0x20 [ 146.933948][ T5207] [ 146.936042][ T5207] Kernel Offset: disabled [ 146.937992][ T5207] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:10:50 Registers: info registers vcpu 0 CPU#0 RAX=00000000000cae61 RBX=0000000000000000 RCX=ffffffff8a3de77e RDX=0000000000000000 RSI=ffffffff8a8cac80 RDI=ffffffff8ae933e0 RBP=fffffbfff1912b08 RSP=ffffffff8c807e18 R8 =0000000000000001 R9 =ffffed10058c6dbd R10=ffff88802c636deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8c895840 R14=ffffffff8ecc2010 R15=0000000000000000 RIP=ffffffff8a3df9cf RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7356f88 CR3=00000000239e1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000dc7af RBX=0000000000000001 RCX=ffffffff8a3de77e RDX=0000000000000000 RSI=ffffffff8a8cac80 RDI=ffffffff8ae933e0 RBP=ffffed1002857000 RSP=ffffc90000457e08 R8 =0000000000000001 R9 =ffffed10058e6dbd R10=ffff88802c736deb R11=0000000000000000 R12=0000000000000001 R13=ffff8880142b8000 R14=ffffffff8ecc2010 R15=0000000000000000 RIP=ffffffff8a3df9cf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f735763c CR3=000000005bc59000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000e6b9f RBX=0000000000000002 RCX=ffffffff8a3de77e RDX=0000000000000000 RSI=ffffffff8a8cac80 RDI=ffffffff8ae933e0 RBP=ffffed1002857480 RSP=ffffc90000467e08 R8 =0000000000000001 R9 =ffffed1005906dbd R10=ffff88802c836deb R11=0000000000000000 R12=0000000000000002 R13=ffff8880142ba400 R14=ffffffff8ecc2010 R15=0000000000000000 RIP=ffffffff8a3df9cf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7378000 CR3=000000005bc59000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff849c05e5 RDI=ffffffff92535d80 RBP=ffffffff92535d40 RSP=ffffc90003fef400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572617764726148 R12=0000000000000000 R13=0000000000000020 R14=ffffffff849c0580 R15=0000000000000000 RIP=ffffffff849c060f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7354170 CR3=000000005bc59000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000