ffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xd3, 0x631, 0x5f, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x700, 0x2}}) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x0, 0x0) (async) socketpair(0x26, 0x2, 0x4, &(0x7f0000000700)) (async) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000740)=0xfd64) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x40, 0x0, &(0x7f0000000540)=[@increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x2}, @dead_binder_done, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x2}], 0x5a, 0x0, &(0x7f0000000580)="1009111c6f5a6f783667cbb42cc3338105f6bfc870fd377d86fc7921b04ef2b21d8169ca8a854cd980738693e51be8c276de1cbaa766e83abe277cc3d0c86c4f24540bde6241699d5e6effc62b750d133ebbee3cce78be6d52a3"}) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xd3, 0x631, 0x5f, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x700, 0x2}}) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r7) (async) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) 17:26:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x0, 0x0) (async, rerun: 64) socketpair(0x26, 0x2, 0x4, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000740)=0xfd64) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x40, 0x0, &(0x7f0000000540)=[@increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x2}, @dead_binder_done, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x2}], 0x5a, 0x0, &(0x7f0000000580)="1009111c6f5a6f783667cbb42cc3338105f6bfc870fd377d86fc7921b04ef2b21d8169ca8a854cd980738693e51be8c276de1cbaa766e83abe277cc3d0c86c4f24540bde6241699d5e6effc62b750d133ebbee3cce78be6d52a3"}) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xd3, 0x631, 0x5f, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x700, 0x2}}) (async, rerun: 32) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (rerun: 32) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async, rerun: 32) r7 = getpid() (rerun: 32) getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) [ 2312.663961][T11081] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.698286][T11088] blktrace: Concurrent blktraces are not allowed on loop6 17:26:28 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000100000000002000e614910b476e1dbda5d12bd5a8ba7dd1b31e422394b97c46463e2e7b70b6122cfe9ace39f7e1ac4df9f3bc2f51777d4f81a33564896976c033b186e3c6baae44c7e127b8a8efc410de17beef3f8d"], 0xa) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8f}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x1, 0x0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x8000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) 17:26:28 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000340)=0xe0000000, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0xffff}) getpeername$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000020000f1ff007bfa"], 0xfffffdef) r1 = accept4$bt_l2cap(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x80800) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) accept4$unix(r2, &(0x7f0000000280), &(0x7f0000000000)=0x6e, 0xc0800) bind$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0xff, @any, 0x8000, 0x1}, 0xe) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000340)=0xe0000000, 0x4) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0xffff}) (async) getpeername$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000020000f1ff007bfa"], 0xfffffdef) (async) accept4$bt_l2cap(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x80800) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) accept4$unix(r2, &(0x7f0000000280), &(0x7f0000000000)=0x6e, 0xc0800) (async) bind$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0xff, @any, 0x8000, 0x1}, 0xe) (async) 17:26:28 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) 17:26:28 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x101000) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000280)={0x81, 0x1000, 0x99, &(0x7f00000001c0)="83848f8d40cc20d154ca6f670ce920473ff3b8fa7a5bcf5ef7e150ca23772dbe2656bcd96bb9050e267d6a5936ccfd58dd078196155f7d973292b757f5127baf653094a3ad69fe797ad17eaaf57e7f7cb1ce4db44aed458216b85a8de9db678a4c9e9481ee83b63bc81cbdaf3b702dc55c36d2e57f36b1d7a18b3f6660d53a399d36261ea7a4dbffc627bac58284801967a23ebb5bebd1820a"}) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f00000002c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140e, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x30}}, 0x84) 17:26:28 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="e30c00000000000038173707816c7c323f8cab4b0af8aae7f163d325f872b020488eb62dafd73428e3252a5edc0001e2187a21a98f96d920656fd8529071920f28a6fa37d8068e4eca0d327ccfeb1b81dd02eeb922949ddaab07115ed556d9d31e196b00000000b1512c", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf250700000008003a0000fcffff"], 0x1c}}, 0x20000040) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 17:26:28 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0xfffffffffffffea7}, {@none}}}, 0xfffffdef) socket$kcm(0x29, 0x5, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x1ff, 0x6, 0xb, 0x18, "2108a0034ce1c1d4df8782bb054e93bec8d3789f226acc0d73f252491de3133844e5300e786427aa62ca67cea7786d2dbdcfd18d9baac45a20c0e48bc6956ef0", "b7baab2ea4e918674cb33821804269941ea3e9bbaf6183990b3b18a889eaf6f9", [0x1, 0x9a46]}) [ 2312.758496][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.768778][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.776403][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.812096][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.823702][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.831171][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.839504][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.846922][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.854269][T11108] blktrace: Concurrent blktraces are not allowed on loop6 17:26:28 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000a8228cd53e8c06d5aed834c7c6ad96887fdea142bd4128540c16e431e0d2d83f9c437d0724d6197a4d8302f59384c4ec3ea7fbb666e76ae83642cc50fd2e88"], 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f00b0406aaaaaaaaaa00"], 0xfffffdef) 17:26:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc048122d, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:28 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0xfffffffffffffea7}, {@none}}}, 0xfffffdef) socket$kcm(0x29, 0x5, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x1ff, 0x6, 0xb, 0x18, "2108a0034ce1c1d4df8782bb054e93bec8d3789f226acc0d73f252491de3133844e5300e786427aa62ca67cea7786d2dbdcfd18d9baac45a20c0e48bc6956ef0", "b7baab2ea4e918674cb33821804269941ea3e9bbaf6183990b3b18a889eaf6f9", [0x1, 0x9a46]}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0xfffffffffffffea7}, {@none}}}, 0xfffffdef) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x1ff, 0x6, 0xb, 0x18, "2108a0034ce1c1d4df8782bb054e93bec8d3789f226acc0d73f252491de3133844e5300e786427aa62ca67cea7786d2dbdcfd18d9baac45a20c0e48bc6956ef0", "b7baab2ea4e918674cb33821804269941ea3e9bbaf6183990b3b18a889eaf6f9", [0x1, 0x9a46]}) (async) 17:26:28 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="e30c00000000000038173707816c7c323f8cab4b0af8aae7f163d325f872b020488eb62dafd73428e3252a5edc0001e2187a21a98f96d920656fd8529071920f28a6fa37d8068e4eca0d327ccfeb1b81dd02eeb922949ddaab07115ed556d9d31e196b00000000b1512c", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf250700000008003a0000fcffff"], 0x1c}}, 0x20000040) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x2}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 17:26:28 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="e30c00000000000038173707816c7c323f8cab4b0af8aae7f163d325f872b020488eb62dafd73428e3252a5edc0001e2187a21a98f96d920656fd8529071920f28a6fa37d8068e4eca0d327ccfeb1b81dd02eeb922949ddaab07115ed556d9d31e196b00000000b1512c", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf250700000008003a0000fcffff"], 0x1c}}, 0x20000040) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) [ 2312.862738][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.870207][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.879031][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.886533][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.934808][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.943140][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.951758][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.959122][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.967676][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.988082][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2312.997866][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.006070][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.013236][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.020623][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.028718][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.037558][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.045603][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.052768][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.062576][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.070883][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.078707][T11108] blktrace: Concurrent blktraces are not allowed on loop6 17:26:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', r4, 0x4, 0x1, 0x5, 0x101, 0x11, @private1, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf000600", @ANYRES32=r5, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r9) 17:26:28 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (fail_nth: 1) 17:26:28 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) (async) 17:26:28 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000a8228cd53e8c06d5aed834c7c6ad96887fdea142bd4128540c16e431e0d2d83f9c437d0724d6197a4d8302f59384c4ec3ea7fbb666e76ae83642cc50fd2e88"], 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f00b0406aaaaaaaaaa00"], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000a8228cd53e8c06d5aed834c7c6ad96887fdea142bd4128540c16e431e0d2d83f9c437d0724d6197a4d8302f59384c4ec3ea7fbb666e76ae83642cc50fd2e88"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f00b0406aaaaaaaaaa00"], 0xfffffdef) (async) 17:26:28 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0xfffffffffffffea7}, {@none}}}, 0xfffffdef) socket$kcm(0x29, 0x5, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x1ff, 0x6, 0xb, 0x18, "2108a0034ce1c1d4df8782bb054e93bec8d3789f226acc0d73f252491de3133844e5300e786427aa62ca67cea7786d2dbdcfd18d9baac45a20c0e48bc6956ef0", "b7baab2ea4e918674cb33821804269941ea3e9bbaf6183990b3b18a889eaf6f9", [0x1, 0x9a46]}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0xfffffffffffffea7}, {@none}}}, 0xfffffdef) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x1ff, 0x6, 0xb, 0x18, "2108a0034ce1c1d4df8782bb054e93bec8d3789f226acc0d73f252491de3133844e5300e786427aa62ca67cea7786d2dbdcfd18d9baac45a20c0e48bc6956ef0", "b7baab2ea4e918674cb33821804269941ea3e9bbaf6183990b3b18a889eaf6f9", [0x1, 0x9a46]}) (async) 17:26:28 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0xbd86, 0x109a02) 17:26:28 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (fail_nth: 2) 17:26:28 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0xbd86, 0x109a02) [ 2313.085900][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.093035][T11108] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.100214][T11108] blktrace: Concurrent blktraces are not allowed on loop6 17:26:28 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0xbd86, 0x109a02) [ 2313.153024][T11166] FAULT_INJECTION: forcing a failure. [ 2313.153024][T11166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2313.156182][T11164] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.166106][T11166] CPU: 1 PID: 11166 Comm: syz-executor.2 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2313.186449][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2313.196512][T11166] Call Trace: [ 2313.199815][T11166] 17:26:28 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x0) 17:26:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', r4, 0x4, 0x1, 0x5, 0x101, 0x11, @private1, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf000600", @ANYRES32=r5, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r7 = getpid() (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) (async) getpgid(r7) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r9) [ 2313.202748][T11166] dump_stack_lvl+0xd6/0x122 [ 2313.207432][T11166] dump_stack+0x11/0x12 [ 2313.211601][T11166] should_fail+0x242/0x250 [ 2313.216032][T11166] should_fail_usercopy+0x16/0x20 [ 2313.221210][T11166] strncpy_from_user+0x22/0x230 [ 2313.226074][T11166] getname_flags+0xb0/0x350 [ 2313.226372][T11173] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.230580][T11166] getname+0x15/0x20 [ 2313.230606][T11166] do_sys_openat2+0x6d/0x2a0 [ 2313.246234][T11166] ? fput+0x2c/0x130 17:26:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', r4, 0x4, 0x1, 0x5, 0x101, 0x11, @private1, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf000600", @ANYRES32=r5, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r7 = getpid() (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r9) [ 2313.250164][T11166] __x64_sys_openat+0xef/0x110 [ 2313.254994][T11166] do_syscall_64+0x2b/0x70 [ 2313.259558][T11166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2313.265481][T11166] RIP: 0033:0x7f732f5e8194 [ 2313.269949][T11166] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2313.289561][T11166] RSP: 002b:00007f732edaaca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 17:26:28 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x0) [ 2313.298094][T11166] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007f732f5e8194 [ 2313.306084][T11166] RDX: 0000000000048a02 RSI: 00007f732edaad40 RDI: 00000000ffffff9c [ 2313.314054][T11166] RBP: 00007f732edaad40 R08: 0000000000000000 R09: 0000000000000000 [ 2313.322091][T11166] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000048a02 [ 2313.330071][T11166] R13: 00007ffce82f556f R14: 00007f732edab300 R15: 0000000000022000 [ 2313.338097][T11166] 17:26:28 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (fail_nth: 3) [ 2313.348327][T11181] blktrace: Concurrent blktraces are not allowed on loop6 17:26:28 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfe, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x32e0, '\x00', 0x0, r1, 0x1, 0x1, 0x1, 0xa}, 0x48) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) 17:26:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x300ab939}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:28 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x0) 17:26:28 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (fail_nth: 4) 17:26:28 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000a8228cd53e8c06d5aed834c7c6ad96887fdea142bd4128540c16e431e0d2d83f9c437d0724d6197a4d8302f59384c4ec3ea7fbb666e76ae83642cc50fd2e88"], 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f00b0406aaaaaaaaaa00"], 0xfffffdef) 17:26:28 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) 17:26:29 executing program 3: socketpair(0x10, 0x3, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$qrtr(r0, &(0x7f0000001380)={&(0x7f0000000040), 0xc, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000180)=""/43, 0x2b}], 0x2, &(0x7f00000013c0)=ANY=[@ANYBLOB="a800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000405f1593d6fbf85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000980000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c08565914c75f99deacb7f6b5d93b6f27e6876eb934342ce7d51b7a7ccdbe3ed886f4f1de61e6339e9a9f0d53c894738513a0222a14e4b78e0a61f0e5a04ec201a45b4fc3de480358259868d9766519efbb16643f3c70d269e572a0f5dab82772b24a72f2399dc845df2b11b7d046040cbcf0a"], 0x1218, 0x40000000}, 0x38, 0x10041) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff9, 0x541942) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (fail_nth: 5) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x300ab939}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:29 executing program 3: socketpair(0x10, 0x3, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$qrtr(r0, &(0x7f0000001380)={&(0x7f0000000040), 0xc, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000180)=""/43, 0x2b}], 0x2, &(0x7f00000013c0)=ANY=[@ANYBLOB="a800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000405f1593d6fbf85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000980000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c08565914c75f99deacb7f6b5d93b6f27e6876eb934342ce7d51b7a7ccdbe3ed886f4f1de61e6339e9a9f0d53c894738513a0222a14e4b78e0a61f0e5a04ec201a45b4fc3de480358259868d9766519efbb16643f3c70d269e572a0f5dab82772b24a72f2399dc845df2b11b7d046040cbcf0a"], 0x1218, 0x40000000}, 0x38, 0x10041) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff9, 0x541942) [ 2313.429004][T11199] blktrace: Concurrent blktraces are not allowed on loop6 17:26:29 executing program 3: socketpair(0x10, 0x3, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$qrtr(r0, &(0x7f0000001380)={&(0x7f0000000040), 0xc, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000180)=""/43, 0x2b}], 0x2, &(0x7f00000013c0)=ANY=[@ANYBLOB="a800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000405f1593d6fbf85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000980000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c08565914c75f99deacb7f6b5d93b6f27e6876eb934342ce7d51b7a7ccdbe3ed886f4f1de61e6339e9a9f0d53c894738513a0222a14e4b78e0a61f0e5a04ec201a45b4fc3de480358259868d9766519efbb16643f3c70d269e572a0f5dab82772b24a72f2399dc845df2b11b7d046040cbcf0a"], 0x1218, 0x40000000}, 0x38, 0x10041) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff9, 0x541942) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async, rerun: 64) r5 = getpid() (rerun: 64) getpgid(r5) (async, rerun: 32) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x300ab939}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async, rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) [ 2313.486448][T11216] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.516335][T11227] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.594559][T11214] FAULT_INJECTION: forcing a failure. [ 2313.594559][T11214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2313.607636][T11214] CPU: 1 PID: 11214 Comm: syz-executor.2 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2313.618700][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2313.628773][T11214] Call Trace: [ 2313.632065][T11214] [ 2313.635019][T11214] dump_stack_lvl+0xd6/0x122 [ 2313.639649][T11214] dump_stack+0x11/0x12 17:26:29 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfe, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x32e0, '\x00', 0x0, r1, 0x1, 0x1, 0x1, 0xa}, 0x48) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) 17:26:29 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xfffffffffffffffc, 0x109a02) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000140)={0x4, 0x9, 0x1}) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x200, 0x9, 0x7fff, 0x4}) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000000c0)) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r4 = getpid() getpgid(r4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) 17:26:29 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) 17:26:29 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) getpeername$qrtr(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) [ 2313.643885][T11214] should_fail+0x242/0x250 [ 2313.648303][T11214] should_fail_usercopy+0x16/0x20 [ 2313.653349][T11214] _copy_to_user+0x1a/0x90 [ 2313.658207][T11214] simple_read_from_buffer+0xab/0x120 [ 2313.663602][T11214] proc_fail_nth_read+0x10d/0x150 [ 2313.668632][T11214] ? proc_fault_inject_write+0x230/0x230 [ 2313.674276][T11214] vfs_read+0x198/0x560 [ 2313.678433][T11214] ? __fget_files+0x1a7/0x1e0 [ 2313.683194][T11214] ksys_read+0xe8/0x1a0 [ 2313.687455][T11214] __x64_sys_read+0x3e/0x50 17:26:29 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) getpeername$qrtr(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) [ 2313.691973][T11214] do_syscall_64+0x2b/0x70 [ 2313.696430][T11214] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2313.702358][T11214] RIP: 0033:0x7f732f5e7e2c [ 2313.706768][T11214] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2313.726555][T11214] RSP: 002b:00007f732edab160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2313.735036][T11214] RAX: ffffffffffffffda RBX: 00007f732f747f80 RCX: 00007f732f5e7e2c 17:26:29 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfe, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x32e0, '\x00', 0x0, r1, 0x1, 0x1, 0x1, 0xa}, 0x48) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfe, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x32e0, '\x00', 0x0, r1, 0x1, 0x1, 0x1, 0xa}, 0x48) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) (async) [ 2313.743018][T11214] RDX: 000000000000000f RSI: 00007f732edab1e0 RDI: 0000000000000003 [ 2313.750993][T11214] RBP: 00007f732edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2313.758962][T11214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2313.766936][T11214] R13: 00007ffce82f556f R14: 00007f732edab300 R15: 0000000000022000 [ 2313.775046][T11214] 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:29 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xfffffffffffffffc, 0x109a02) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000140)={0x4, 0x9, 0x1}) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x200, 0x9, 0x7fff, 0x4}) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000000c0)) syz_open_dev$vcsu(&(0x7f0000000100), 0xfffffffffffffffc, 0x109a02) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000140)={0x4, 0x9, 0x1}) (async) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x200, 0x9, 0x7fff, 0x4}) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000000c0)) (async) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r4 = getpid() getpgid(r4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async, rerun: 64) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) 17:26:29 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xfffffffffffffffc, 0x109a02) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000140)={0x4, 0x9, 0x1}) (async) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x200, 0x9, 0x7fff, 0x4}) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000000c0)) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r4 = getpid() getpgid(r4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r4) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) (async) 17:26:29 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x220100) socketpair(0x21, 0xa, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x20) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x7) [ 2313.800366][T11245] blktrace: Concurrent blktraces are not allowed on loop6 [ 2313.830873][T11259] blktrace: Concurrent blktraces are not allowed on loop6 17:26:29 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x220100) socketpair(0x21, 0xa, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x20) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x7) 17:26:29 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) getpeername$qrtr(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) getpeername$qrtr(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) [ 2313.871041][T11276] blktrace: Concurrent blktraces are not allowed on loop6 17:26:29 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) (async) 17:26:29 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x220100) socketpair(0x21, 0xa, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x20) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x7) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x48a02) 17:26:29 executing program 5: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x1e9302) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x40800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x48a02) 17:26:29 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001680)={0xf8, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/218, 0xda, 0x0, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/237, 0xed, 0x2, 0x35}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000300), 0x0, 0x1, 0x1f}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x2}, @decrefs, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/77, 0x4d, 0x0, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/18, 0x12, 0x2, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x29}}, &(0x7f0000000540)={0x0, 0x28, 0x50}}, 0x400}, @enter_looper], 0x1000, 0x0, &(0x7f0000000680)="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"}) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) (async) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x48a02) [ 2313.961416][T11301] blktrace: Concurrent blktraces are not allowed on loop6 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x18, 0x48a02) 17:26:29 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001680)={0xf8, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/218, 0xda, 0x0, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/237, 0xed, 0x2, 0x35}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000300), 0x0, 0x1, 0x1f}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x2}, @decrefs, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/77, 0x4d, 0x0, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/18, 0x12, 0x2, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x29}}, &(0x7f0000000540)={0x0, 0x28, 0x50}}, 0x400}, @enter_looper], 0x1000, 0x0, &(0x7f0000000680)="995bd50f58cede25b4099a820dd280dbf88c188d9558cb59c05dab530e48f134e9a77d27049624314aa196e268682caec55cb16264f257ac3631fbb8f5737a7f98d287cef41cb547478f6410e3c1ba600043f5554751483b8e3731131024cb05375085417ed267ab1d7fd9db48fd8fd50a5f1953ae94b3eb50164e2968e409910ef22e273dcf869855b369c690995da1f50d257bf9a8f1a9421d7a1804bad78ec517cb09337f2675534dc62a73c528ebce854d872e018039578e278b34c805c64680f8b564119f9751fbdfd9096073e8e16026eab40bd0c1eed53ffd704e6095fa386d4d7c38fe1af885dc891117b65e9a314c8d29c800e23ffc147435d903cd2b52b53bdda27a9e29dc6f8c0fdb3b25ab30521e4affcc7d53193a27c3fa2a0102b0536af653fe74d8353a31976b56311013ebc95785a6ea4902d4d5b79ed81af2c03752aec8914d1b632cc7f70bdec444822da4c1bd0a66645dea3856384ddc04769fcbbc224834006861c6c5bde45292f74e1d4c0af13dc111ca3f5cdd5a58d3e4e6acaf9b6579bdc888f501d31f4272abfe8447290ca463074ce1f189f71b02302ee0ef173a78f71b3d40ade96659a386d7acf330b25970ea805fed4c39031a9d7ac91f06e87269584ca8fbfedd23b0187c2f42dd445697ddd278ab9a12a2926210d45464d35961cf24cfd3e5744627bf09f08b404fba32122a2aa594e1a945a3db0ca237c938e84ee76cc73afc08389ba282bb0568aa89765bc98d8c1d38c5b5da08032816833eb680d7e98a093d9913352d836cc3adbd9c9197c759b82c34f6363c23f7ace52dd4936505760e6ba3a8ef8b730d1aa5c8058dbcf5742177201a9185729fe2be70fee0f80bd61346691d033524887c0892abbc700fb6f2cdf90f1f53b4713b3cdf58f433a7888b20b585474a9e07479cabb8817e697b52b815fa79f3a1fd705434c8172fa2abe9f75ef78675313853c8b0282f4d6579ee9daa29c7567e5bdcd0d94ac6c85d7d22436334f0285dd3f23888b881b58d058feb15df40bafec8769a0900a36311083c07b0b8de097d460e1576dce7298aaa743a5ef2c93c70b1b6a207f93c9defce7fb02f922a0a0d237020c610da1c35cd004388315107935b9dbaa5684f652a0175fe98eba08f13d4ea05597eb4f026492004750761b2658286bb329926a2af7eb8535e8184600424d9ebe14248c93e08443abe58e3cc2deeac438238919c983099cda87238dc843f1d36d8aa25a3f236d816f6bc87fa8923fc543ecddd54db65e802e1e5d976d85a5c843eb32dabd17fa27ee0ecd7f513305463ffd88079894740973b429e3bb0ab64d4b11f016e68f087ed6dfec342987a6c543112eff40b49cb8195f847146070989ee2a48922a6b8d6f52849e0a0c4c24caf0111ae8288ac470197146487e30b6cd9a255e294ed08243f38de98ce21b7be0531b41c9512f00318c1359fbd6d230b268d87582aea29d19a4da95b4a10f595da7813b8d61a13f1b15c046193e4d8b1359778e1fa003ca30861a9c0f4f4e62d4bd47e4e87d69b9048c37ff8ecf2b43cb9cd5dc3cb379128fdf7398d2697cd5dc23ac8af10033a117dd661db9fd1959935b9dd021f29b5695e82837a3c059bc35bed58820f2efc73712a2bea0b664cd0baf1cf64a5ad94921df91721fc6d853f8958d2183222e0eb4626cf784b032dd61d688c9475edabbf60b1ccc811db926ad4d391170c457c36f10a7133e7cb1482ff00ed82feabfe17c590b54bfb869cac77f6d6d730aa31d88b7a6f937ea80c5ef768828f18fedb655cfb11070585535fa1a1b9858540d7ff8336be54ca0675806e2e6102820f018ead41888c1d1849f3e5705350b6a70c6c35cf3ed2b81d032e1e93fac845dbaaff07909cbf605c5b73ba353adcf2023d4353c040b23d3b02fca427bca7d8324ad5ee3b8dbb699ea85743b20afab39ab741578f22439b4907ee23d315e5e4dd037e99af27686efa6f4f3f9e09422c209eb4024a23128e10efa01cdaa148a8584e00e8798bdd4f8ded0703531772142365e8f09e7d772621477020cba09b573b671aaa9f0a9ba639af715856f9282da5877867d2eaa84c50f8c9427ff9350a421e922cae926bbd0bc769c0ccdd425d639301f8aa6a2b2355e221eb2b2482a9b04db0b9785264a6affc6f5dcfe9fb185f3e72a09f9a4cb7b1e92811c0a228ee75c7c46d81f901ed4473c9b1811d560ecbdb8224a6889ded8db1e8d58afa75f66e7d02947eafdf977b6ab32f2f417d51f223ac961bf524a26bc934150f18cecafa277c7c32590ed4f5f9082e594452bac836629724da4a298ca9cfe4cb0b34e5dc6b528f00eb6d5491dfe267378becfff7cfb5da9e10bb4c47aba4e7b87f034269c3a716ab0a1806743e3a759a28291e44e997c4677278d004caa7d56017e3a9a54c63e0292ca40ff47e0aabe97bb09e914ce4f00b7aaa6d3bd3e52b35581851e20ee5fbea4d27ade81354b69a02086306b68fbc58989ed209dc815b903183eff2f6b0fa10cc6799a9956b79bd4457a4899c93d789f09d68d4851ad7e9645ee9c31e9e246d67ab284a1bbefca3d7af6e6aacb9cfdeb5e1cc01c772c99f031c010ce3a013d9f28423893a29dfac612a202746097c04122e87a3d9611cb2be5a7b2c5880a8a822fba9f6cb6ad6cf959e0ea1faaab23a872415497568368f5bc661bc57e4a420b0f76373808f3f381bc1dbf249a121cdd2a48b58bffd7561ffd1c8aaf6d646775d7017a8bb66da219472067fad1768565e48530971e2623142015b6919d7d25123db17795b0d59e05bcb7d60e7a3f3036dc8ee16e3a2ddc1cf5f8ea210e6931774e9a5dd8b128435788538f09710301efcdb379d882f2f57e3aa61b2069e094836e72cc011dfd5720245a755dae64f7888f388e119b5371a589b920ba34732e22596d71746dd70d1129104703c86710f16b4fb21135e3df5d8e1f28cfdd867624a73ec946b873fa7e26180950edc4b7e0516da05aa2655032e0bdb6ed80081cf69b9dd8413373105add7b9b99ff82042f4daac931edd2a79f88314d666682cab3c7469891327e954e56a913c3f7c8a2dbd9d85155b56193aae112f59f4de1fd0ad691ff50bef2cb7de50c4eb568df23b9bffdce1dcd176f3f05e6d2dfb294ac165323d4d119f3ca684fdca91ccb0fcac9c4d68c14840d9641440a8e9b376a4de70c259cdf94ad969adcf575d57ea85a3d2c130518172ca0338bbeefc97adbc3a36035075d7fdca578002ee4b49cb067bc106ecf667e73fed56abebf3b8ba107c1d97e706ebc59fb2cbf72ddff09353ac8c92d2aafd7213c9ea647413563770be36c39c0e76caf93ffe3ce7a81cba30ff011c7cc916c617702ad153764609ec17e59ebf6f7124e3995ad3947802af89726cd18d639eeb219564969bd858c36587ed1d24c8511a80012966edc0903647e28d087630fcdcc7ed70e77675dd52557db1e127c03f3a027b64ce39766271e231ff350df95627a1eb11597d1c6cfe35143744f5a74bb3a00b91ff0068d7ae64d1e67b7bb3b5482e986ce5b9217671d0ada400c0e8508878f425f032f18ad4437683fb1a18cb6facd83b76794e349e61e214ea69ecb75b945f763f3b9b1400041a83890dc158392f0d58dc6c08221b1d2a56d97f4704c0c79ab9d30cd296abbd7d440baecaa9c9876e125a993dc683abc79631705ebc81a78c4e22550c2486566d996d60253ea521dcea5feeee47250366e72ddd8da8eb3919b6d1272e5c9581740a6e7fd925a93e3c34eddf37bf3591ae0943e8d4410fbc33276806d75ec9d27b3be93e38268e1059e21bf2eb99f7989155799ce1b73b84a94ef07c845128d05a938be6d1e6943e3086403d1176e4404beadcb92130882d4ec2cb131c158c412aefe4d81484762d988ea6d566d0045aa0454f058fda9f9c1402fe22f99d019e8e4b2a151b3e69c22606544a27d0a9a5f1e0a2f12607f7268a290062d0db26d9fde2f0cb45bd2d4e84bee36c37c45ec1694cc0d71e6095dfb40a226e39b91fc8b977bf9ac787dd25dbdb61bcc0483a8a2e409dd9a7158233353d69b8f1284b277e88c682f1d18684e0473c1fedb9e0c08c71e9e3382309fda2dfd9aa37b94ea1c46dd4234475e8d98fc5a1c4e0e96c119f0bf2756b9fc45c0a3461cccfcb12e21e41dbeee64754d8a7989b7c5c0ecf87093fd8f8b40220ce0e95cac40fa5c9f799aed143b3a8cfabae7ba166c28e3e40b6f953fb58f5ca2d98041ab83fc1ff56ad1c783f580d511d91e55ea46be07b142f4713ac292e057756ff7c66659c17e6e7a9bb7f016ba28c0dfb7973ff4bf37e506f72ea545641e527f540caac98b2dba426ee9c484ea9e338e4a71dcecf103b1041d89817f95d38e083be4b44e5292fa7e5c8748c678e2d4b99c444e4aa8acc6cba38a7eb5000d24acc0e5346948cb10e2a5ab6a416c15b6fabb7b7ec8f8a2d3b68f1b33a4d65e5fb1f83d833edbdfb43167eaa3c725216567e4ce2cd53d678f89eec1b27053c829362d2745b8ca7ea55abb9bd1e3526336e64cd9f935376d97850b13aaa67efe127caeda8a0e2643c2176a0fd375a24fdb86e83b80b34a830dfc68b5feb9fe1e9617fa3d0c3580fb24b24792c200134076285e452787453ae5ff1054d8168ca8544f9ec350334b3f74f18864cd3b83f5e5a72f268ff5d35a93b61469c373df04bdbfd78fec5281c4e12dc5644d0e994726b6732514191d9fec581e010ccd07bf7a604f7c4325b103b2af41aec1c8d26f6c78659241b483fc975f7ea574f2c04a32f4abcbde2e548191896cf54e6541226d89f163523f03a7e92b01b81be9c3d4b856f0d8793136987102b343770679ceaa3de8cba9d92ae274704ed9d0bd151062179ed859ced1b90f0b738b4a3042a175ef41f92bd9517d52af38461d2a0695b71d81cbfc7de7af4613fd2a30c31eccf2964e9da6181a3f1ad0b5ad9204057c6dc9219bb7259d66d9eb3eacfd4d37870ae034483b93069afbe3e99e5cbe45e3e3bc452b31d8a5671f03bdfec94d540711de0754944d2bcbc3727113b4ff3864df42536010dc954cf570da4f94407e99ec67d643b8c0368d34765d7ae399b172d768520721340e8861b3ec1391d1eed0cdd04a963a4ae6f3f823ea1431b22057df644edbfc1332f26723077ecc3f1b9119fa8bdbb09d56499888a8024aa283a391b1869c3ced6cbdea4814d63cf678076302c8cdc56a44e7ac9e8c34c30cea07d6d6229d0a0c6c2560d10797a0499fe9da0e5bdd12f26ba884a285f2304a3d774e36c4865274a4725ff85aa297794fbd8062890094e510cb65d53f20cf07117e7efac3c1dc81f7ce7082cb6964b7356ad452874e60e49d2ce0b8bce11d411560bd380789f10601abf5a78fbb71af118cca30963e5079464cfc1a276895383b7673b0b88162ba90edd33d825489573f03ebb77dd4136b6fa3496e26d8f9826f04b1e694d27949cb6b3f7c191f7b06ea279b35ad898e666ef4877218b42a1e7a33206c93aac9758a5be58098a75fb5a8160efe8aced1cf6dc6b87b8cdaf29b33c950e17a683e326247675dece510e3f9aa5a14e6aab54a7d5916085911a334a5f267b27f0bf3766df786fe3d5e0da57c56803c7874519df8f374ef768c8a7083c2de85da3a0b7783fd21e1a7c467816caaf13f9a26c5661c8dad61a0668c5b5df804714af231cb7d81ce1928a62748d5cbbc57b67d9b07747c3ecf6c9c1679d79782732ae10d42ad9c285443f7216ff28b400f2133535273545"}) 17:26:29 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x2, 0x1}) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000300)) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000080), 0x100, 0x452400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 17:26:29 executing program 5: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x1e9302) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x40800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x300, 0x48a02) [ 2314.006526][T11317] blktrace: Concurrent blktraces are not allowed on loop6 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) 17:26:29 executing program 5: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x1e9302) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x40800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), 0x4) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x1e9302) (async) accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x40800) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) (async) 17:26:29 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001680)={0xf8, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/218, 0xda, 0x0, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/237, 0xed, 0x2, 0x35}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000300), 0x0, 0x1, 0x1f}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x2}, @decrefs, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/77, 0x4d, 0x0, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/18, 0x12, 0x2, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x29}}, &(0x7f0000000540)={0x0, 0x28, 0x50}}, 0x400}, @enter_looper], 0x1000, 0x0, &(0x7f0000000680)="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"}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001680)={0xf8, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/218, 0xda, 0x0, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/237, 0xed, 0x2, 0x35}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000300), 0x0, 0x1, 0x1f}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x2}, @decrefs, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/77, 0x4d, 0x0, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/18, 0x12, 0x2, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x29}}, &(0x7f0000000540)={0x0, 0x28, 0x50}}, 0x400}, @enter_looper], 0x1000, 0x0, &(0x7f0000000680)="995bd50f58cede25b4099a820dd280dbf88c188d9558cb59c05dab530e48f134e9a77d27049624314aa196e268682caec55cb16264f257ac3631fbb8f5737a7f98d287cef41cb547478f6410e3c1ba600043f5554751483b8e3731131024cb05375085417ed267ab1d7fd9db48fd8fd50a5f1953ae94b3eb50164e2968e409910ef22e273dcf869855b369c690995da1f50d257bf9a8f1a9421d7a1804bad78ec517cb09337f2675534dc62a73c528ebce854d872e018039578e278b34c805c64680f8b564119f9751fbdfd9096073e8e16026eab40bd0c1eed53ffd704e6095fa386d4d7c38fe1af885dc891117b65e9a314c8d29c800e23ffc147435d903cd2b52b53bdda27a9e29dc6f8c0fdb3b25ab30521e4affcc7d53193a27c3fa2a0102b0536af653fe74d8353a31976b56311013ebc95785a6ea4902d4d5b79ed81af2c03752aec8914d1b632cc7f70bdec444822da4c1bd0a66645dea3856384ddc04769fcbbc224834006861c6c5bde45292f74e1d4c0af13dc111ca3f5cdd5a58d3e4e6acaf9b6579bdc888f501d31f4272abfe8447290ca463074ce1f189f71b02302ee0ef173a78f71b3d40ade96659a386d7acf330b25970ea805fed4c39031a9d7ac91f06e87269584ca8fbfedd23b0187c2f42dd445697ddd278ab9a12a2926210d45464d35961cf24cfd3e5744627bf09f08b404fba32122a2aa594e1a945a3db0ca237c938e84ee76cc73afc08389ba282bb0568aa89765bc98d8c1d38c5b5da08032816833eb680d7e98a093d9913352d836cc3adbd9c9197c759b82c34f6363c23f7ace52dd4936505760e6ba3a8ef8b730d1aa5c8058dbcf5742177201a9185729fe2be70fee0f80bd61346691d033524887c0892abbc700fb6f2cdf90f1f53b4713b3cdf58f433a7888b20b585474a9e07479cabb8817e697b52b815fa79f3a1fd705434c8172fa2abe9f75ef78675313853c8b0282f4d6579ee9daa29c7567e5bdcd0d94ac6c85d7d22436334f0285dd3f23888b881b58d058feb15df40bafec8769a0900a36311083c07b0b8de097d460e1576dce7298aaa743a5ef2c93c70b1b6a207f93c9defce7fb02f922a0a0d237020c610da1c35cd004388315107935b9dbaa5684f652a0175fe98eba08f13d4ea05597eb4f026492004750761b2658286bb329926a2af7eb8535e8184600424d9ebe14248c93e08443abe58e3cc2deeac438238919c983099cda87238dc843f1d36d8aa25a3f236d816f6bc87fa8923fc543ecddd54db65e802e1e5d976d85a5c843eb32dabd17fa27ee0ecd7f513305463ffd88079894740973b429e3bb0ab64d4b11f016e68f087ed6dfec342987a6c543112eff40b49cb8195f847146070989ee2a48922a6b8d6f52849e0a0c4c24caf0111ae8288ac470197146487e30b6cd9a255e294ed08243f38de98ce21b7be0531b41c9512f00318c1359fbd6d230b268d87582aea29d19a4da95b4a10f595da7813b8d61a13f1b15c046193e4d8b1359778e1fa003ca30861a9c0f4f4e62d4bd47e4e87d69b9048c37ff8ecf2b43cb9cd5dc3cb379128fdf7398d2697cd5dc23ac8af10033a117dd661db9fd1959935b9dd021f29b5695e82837a3c059bc35bed58820f2efc73712a2bea0b664cd0baf1cf64a5ad94921df91721fc6d853f8958d2183222e0eb4626cf784b032dd61d688c9475edabbf60b1ccc811db926ad4d391170c457c36f10a7133e7cb1482ff00ed82feabfe17c590b54bfb869cac77f6d6d730aa31d88b7a6f937ea80c5ef768828f18fedb655cfb11070585535fa1a1b9858540d7ff8336be54ca0675806e2e6102820f018ead41888c1d1849f3e5705350b6a70c6c35cf3ed2b81d032e1e93fac845dbaaff07909cbf605c5b73ba353adcf2023d4353c040b23d3b02fca427bca7d8324ad5ee3b8dbb699ea85743b20afab39ab741578f22439b4907ee23d315e5e4dd037e99af27686efa6f4f3f9e09422c209eb4024a23128e10efa01cdaa148a8584e00e8798bdd4f8ded0703531772142365e8f09e7d772621477020cba09b573b671aaa9f0a9ba639af715856f9282da5877867d2eaa84c50f8c9427ff9350a421e922cae926bbd0bc769c0ccdd425d639301f8aa6a2b2355e221eb2b2482a9b04db0b9785264a6affc6f5dcfe9fb185f3e72a09f9a4cb7b1e92811c0a228ee75c7c46d81f901ed4473c9b1811d560ecbdb8224a6889ded8db1e8d58afa75f66e7d02947eafdf977b6ab32f2f417d51f223ac961bf524a26bc934150f18cecafa277c7c32590ed4f5f9082e594452bac836629724da4a298ca9cfe4cb0b34e5dc6b528f00eb6d5491dfe267378becfff7cfb5da9e10bb4c47aba4e7b87f034269c3a716ab0a1806743e3a759a28291e44e997c4677278d004caa7d56017e3a9a54c63e0292ca40ff47e0aabe97bb09e914ce4f00b7aaa6d3bd3e52b35581851e20ee5fbea4d27ade81354b69a02086306b68fbc58989ed209dc815b903183eff2f6b0fa10cc6799a9956b79bd4457a4899c93d789f09d68d4851ad7e9645ee9c31e9e246d67ab284a1bbefca3d7af6e6aacb9cfdeb5e1cc01c772c99f031c010ce3a013d9f28423893a29dfac612a202746097c04122e87a3d9611cb2be5a7b2c5880a8a822fba9f6cb6ad6cf959e0ea1faaab23a872415497568368f5bc661bc57e4a420b0f76373808f3f381bc1dbf249a121cdd2a48b58bffd7561ffd1c8aaf6d646775d7017a8bb66da219472067fad1768565e48530971e2623142015b6919d7d25123db17795b0d59e05bcb7d60e7a3f3036dc8ee16e3a2ddc1cf5f8ea210e6931774e9a5dd8b128435788538f09710301efcdb379d882f2f57e3aa61b2069e094836e72cc011dfd5720245a755dae64f7888f388e119b5371a589b920ba34732e22596d71746dd70d1129104703c86710f16b4fb21135e3df5d8e1f28cfdd867624a73ec946b873fa7e26180950edc4b7e0516da05aa2655032e0bdb6ed80081cf69b9dd8413373105add7b9b99ff82042f4daac931edd2a79f88314d666682cab3c7469891327e954e56a913c3f7c8a2dbd9d85155b56193aae112f59f4de1fd0ad691ff50bef2cb7de50c4eb568df23b9bffdce1dcd176f3f05e6d2dfb294ac165323d4d119f3ca684fdca91ccb0fcac9c4d68c14840d9641440a8e9b376a4de70c259cdf94ad969adcf575d57ea85a3d2c130518172ca0338bbeefc97adbc3a36035075d7fdca578002ee4b49cb067bc106ecf667e73fed56abebf3b8ba107c1d97e706ebc59fb2cbf72ddff09353ac8c92d2aafd7213c9ea647413563770be36c39c0e76caf93ffe3ce7a81cba30ff011c7cc916c617702ad153764609ec17e59ebf6f7124e3995ad3947802af89726cd18d639eeb219564969bd858c36587ed1d24c8511a80012966edc0903647e28d087630fcdcc7ed70e77675dd52557db1e127c03f3a027b64ce39766271e231ff350df95627a1eb11597d1c6cfe35143744f5a74bb3a00b91ff0068d7ae64d1e67b7bb3b5482e986ce5b9217671d0ada400c0e8508878f425f032f18ad4437683fb1a18cb6facd83b76794e349e61e214ea69ecb75b945f763f3b9b1400041a83890dc158392f0d58dc6c08221b1d2a56d97f4704c0c79ab9d30cd296abbd7d440baecaa9c9876e125a993dc683abc79631705ebc81a78c4e22550c2486566d996d60253ea521dcea5feeee47250366e72ddd8da8eb3919b6d1272e5c9581740a6e7fd925a93e3c34eddf37bf3591ae0943e8d4410fbc33276806d75ec9d27b3be93e38268e1059e21bf2eb99f7989155799ce1b73b84a94ef07c845128d05a938be6d1e6943e3086403d1176e4404beadcb92130882d4ec2cb131c158c412aefe4d81484762d988ea6d566d0045aa0454f058fda9f9c1402fe22f99d019e8e4b2a151b3e69c22606544a27d0a9a5f1e0a2f12607f7268a290062d0db26d9fde2f0cb45bd2d4e84bee36c37c45ec1694cc0d71e6095dfb40a226e39b91fc8b977bf9ac787dd25dbdb61bcc0483a8a2e409dd9a7158233353d69b8f1284b277e88c682f1d18684e0473c1fedb9e0c08c71e9e3382309fda2dfd9aa37b94ea1c46dd4234475e8d98fc5a1c4e0e96c119f0bf2756b9fc45c0a3461cccfcb12e21e41dbeee64754d8a7989b7c5c0ecf87093fd8f8b40220ce0e95cac40fa5c9f799aed143b3a8cfabae7ba166c28e3e40b6f953fb58f5ca2d98041ab83fc1ff56ad1c783f580d511d91e55ea46be07b142f4713ac292e057756ff7c66659c17e6e7a9bb7f016ba28c0dfb7973ff4bf37e506f72ea545641e527f540caac98b2dba426ee9c484ea9e338e4a71dcecf103b1041d89817f95d38e083be4b44e5292fa7e5c8748c678e2d4b99c444e4aa8acc6cba38a7eb5000d24acc0e5346948cb10e2a5ab6a416c15b6fabb7b7ec8f8a2d3b68f1b33a4d65e5fb1f83d833edbdfb43167eaa3c725216567e4ce2cd53d678f89eec1b27053c829362d2745b8ca7ea55abb9bd1e3526336e64cd9f935376d97850b13aaa67efe127caeda8a0e2643c2176a0fd375a24fdb86e83b80b34a830dfc68b5feb9fe1e9617fa3d0c3580fb24b24792c200134076285e452787453ae5ff1054d8168ca8544f9ec350334b3f74f18864cd3b83f5e5a72f268ff5d35a93b61469c373df04bdbfd78fec5281c4e12dc5644d0e994726b6732514191d9fec581e010ccd07bf7a604f7c4325b103b2af41aec1c8d26f6c78659241b483fc975f7ea574f2c04a32f4abcbde2e548191896cf54e6541226d89f163523f03a7e92b01b81be9c3d4b856f0d8793136987102b343770679ceaa3de8cba9d92ae274704ed9d0bd151062179ed859ced1b90f0b738b4a3042a175ef41f92bd9517d52af38461d2a0695b71d81cbfc7de7af4613fd2a30c31eccf2964e9da6181a3f1ad0b5ad9204057c6dc9219bb7259d66d9eb3eacfd4d37870ae034483b93069afbe3e99e5cbe45e3e3bc452b31d8a5671f03bdfec94d540711de0754944d2bcbc3727113b4ff3864df42536010dc954cf570da4f94407e99ec67d643b8c0368d34765d7ae399b172d768520721340e8861b3ec1391d1eed0cdd04a963a4ae6f3f823ea1431b22057df644edbfc1332f26723077ecc3f1b9119fa8bdbb09d56499888a8024aa283a391b1869c3ced6cbdea4814d63cf678076302c8cdc56a44e7ac9e8c34c30cea07d6d6229d0a0c6c2560d10797a0499fe9da0e5bdd12f26ba884a285f2304a3d774e36c4865274a4725ff85aa297794fbd8062890094e510cb65d53f20cf07117e7efac3c1dc81f7ce7082cb6964b7356ad452874e60e49d2ce0b8bce11d411560bd380789f10601abf5a78fbb71af118cca30963e5079464cfc1a276895383b7673b0b88162ba90edd33d825489573f03ebb77dd4136b6fa3496e26d8f9826f04b1e694d27949cb6b3f7c191f7b06ea279b35ad898e666ef4877218b42a1e7a33206c93aac9758a5be58098a75fb5a8160efe8aced1cf6dc6b87b8cdaf29b33c950e17a683e326247675dece510e3f9aa5a14e6aab54a7d5916085911a334a5f267b27f0bf3766df786fe3d5e0da57c56803c7874519df8f374ef768c8a7083c2de85da3a0b7783fd21e1a7c467816caaf13f9a26c5661c8dad61a0668c5b5df804714af231cb7d81ce1928a62748d5cbbc57b67d9b07747c3ecf6c9c1679d79782732ae10d42ad9c285443f7216ff28b400f2133535273545"}) (async) 17:26:29 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r1, 0x8001, 0x18}, 0xc) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x40048000) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00d648657ac7688e9a6ffe7046c7936793d02b78645f3fa5100894862e049cd61f9ad952e8c1c7e4f2e53873629af3a198fd90ff3135f34c4341f45d05fdd748aaca107a924c482cbaa1ada8a9f63fc7f7149d5c61a10f52d537d9cd500082417265438ed0176adeb4607aeb5c48"], 0xfffffdef) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x408, 0x48a02) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x804, 0x48a02) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r4 = getpid() getpgid(r4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) r5 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000240)={0x3}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) [ 2314.091203][T11349] blktrace: Concurrent blktraces are not allowed on loop6 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x1800, 0x48a02) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x2000, 0x48a02) [ 2314.134622][T11368] blktrace: Concurrent blktraces are not allowed on loop6 17:26:29 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x2, 0x1}) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000300)) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000080), 0x100, 0x452400) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r4 = getpid() getpgid(r4) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async, rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) (async, rerun: 32) r5 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000240)={0x3}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x3f00, 0x48a02) 17:26:29 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r1, 0x8001, 0x18}, 0xc) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x40048000) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00d648657ac7688e9a6ffe7046c7936793d02b78645f3fa5100894862e049cd61f9ad952e8c1c7e4f2e53873629af3a198fd90ff3135f34c4341f45d05fdd748aaca107a924c482cbaa1ada8a9f63fc7f7149d5c61a10f52d537d9cd500082417265438ed0176adeb4607aeb5c48"], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000240)}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r1, 0x8001, 0x18}, 0xc) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x40048000) (async) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00d648657ac7688e9a6ffe7046c7936793d02b78645f3fa5100894862e049cd61f9ad952e8c1c7e4f2e53873629af3a198fd90ff3135f34c4341f45d05fdd748aaca107a924c482cbaa1ada8a9f63fc7f7149d5c61a10f52d537d9cd500082417265438ed0176adeb4607aeb5c48"], 0xfffffdef) (async) 17:26:29 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="55f561745aed957a0000"], 0xa) 17:26:29 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x7f, 0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="7d1f631b078714d39a60f3a110e255dc1c000000", @ANYRES16=r1, @ANYBLOB="20002dbd7000fddbdf250700000006001b004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x44000010}, 0x4004800) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000016c0)={&(0x7f00000001c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/108, 0x6c}, {&(0x7f00000014c0)=""/104, 0x68}], 0x6, &(0x7f00000015c0)=""/216, 0xd8}, 0x2000) syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109a02) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x4000, 0x48a02) 17:26:29 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x7f, 0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="7d1f631b078714d39a60f3a110e255dc1c000000", @ANYRES16=r1, @ANYBLOB="20002dbd7000fddbdf250700000006001b004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x44000010}, 0x4004800) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000016c0)={&(0x7f00000001c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/108, 0x6c}, {&(0x7f00000014c0)=""/104, 0x68}], 0x6, &(0x7f00000015c0)=""/216, 0xd8}, 0x2000) syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109a02) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x7f, 0x4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="7d1f631b078714d39a60f3a110e255dc1c000000", @ANYRES16=r1, @ANYBLOB="20002dbd7000fddbdf250700000006001b004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x44000010}, 0x4004800) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) recvmsg$kcm(r2, &(0x7f00000016c0)={&(0x7f00000001c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/108, 0x6c}, {&(0x7f00000014c0)=""/104, 0x68}], 0x6, &(0x7f00000015c0)=""/216, 0xd8}, 0x2000) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109a02) (async) 17:26:29 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x7f, 0x4) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="7d1f631b078714d39a60f3a110e255dc1c000000", @ANYRES16=r1, @ANYBLOB="20002dbd7000fddbdf250700000006001b004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x44000010}, 0x4004800) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) recvmsg$kcm(r2, &(0x7f00000016c0)={&(0x7f00000001c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/108, 0x6c}, {&(0x7f00000014c0)=""/104, 0x68}], 0x6, &(0x7f00000015c0)=""/216, 0xd8}, 0x2000) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109a02) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x200000, 0x48a02) 17:26:29 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="55f561745aed957a0000"], 0xa) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="55f561745aed957a0000"], 0xa) (async) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r4 = getpid() getpgid(r4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) r5 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000240)={0x3}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r4) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) (async) getpid() (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000240)={0x3}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) [ 2314.243078][T11382] blktrace: Concurrent blktraces are not allowed on loop6 17:26:29 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x2, 0x1}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000300)) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 64) syz_open_dev$vcsu(&(0x7f0000000080), 0x100, 0x452400) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 17:26:29 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth0\x00'}) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x1000000, 0x48a02) 17:26:29 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r1, 0x8001, 0x18}, 0xc) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x40048000) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00d648657ac7688e9a6ffe7046c7936793d02b78645f3fa5100894862e049cd61f9ad952e8c1c7e4f2e53873629af3a198fd90ff3135f34c4341f45d05fdd748aaca107a924c482cbaa1ada8a9f63fc7f7149d5c61a10f52d537d9cd500082417265438ed0176adeb4607aeb5c48"], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000240)}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r1, 0x8001, 0x18}, 0xc) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x40048000) (async) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00d648657ac7688e9a6ffe7046c7936793d02b78645f3fa5100894862e049cd61f9ad952e8c1c7e4f2e53873629af3a198fd90ff3135f34c4341f45d05fdd748aaca107a924c482cbaa1ada8a9f63fc7f7149d5c61a10f52d537d9cd500082417265438ed0176adeb4607aeb5c48"], 0xfffffdef) (async) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8000, 0x20, 0x82, 0x6}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd70000600"/18, @ANYRES32=r3, @ANYBLOB="13ac990001000000498533c5e3c5b909ecc3d9842097542adae4ead2e0e15b65cca9223c0bf3bd764c7e24cf2c04c018fe207947649351773809b22cb6c8b413800c187225bff7fd61c61928b35af954337cfc1998e04054a0f9e3da57000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f20b228b69ab"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:29 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="55f561745aed957a0000"], 0xa) 17:26:29 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth0\x00'}) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x2000000, 0x48a02) [ 2314.317672][T11409] blktrace: Concurrent blktraces are not allowed on loop6 [ 2314.336404][T11419] blktrace: Concurrent blktraces are not allowed on loop6 17:26:29 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth0\x00'}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth0\x00'}) (async) 17:26:29 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x3000000, 0x48a02) 17:26:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8000, 0x20, 0x82, 0x6}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd70000600"/18, @ANYRES32=r3, @ANYBLOB="13ac990001000000498533c5e3c5b909ecc3d9842097542adae4ead2e0e15b65cca9223c0bf3bd764c7e24cf2c04c018fe207947649351773809b22cb6c8b413800c187225bff7fd61c61928b35af954337cfc1998e04054a0f9e3da57000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f20b228b69ab"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8000, 0x20, 0x82, 0x6}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd70000600"/18, @ANYRES32=r3, @ANYBLOB="13ac990001000000498533c5e3c5b909ecc3d9842097542adae4ead2e0e15b65cca9223c0bf3bd764c7e24cf2c04c018fe207947649351773809b22cb6c8b413800c187225bff7fd61c61928b35af954337cfc1998e04054a0f9e3da57000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f20b228b69ab"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) [ 2314.380775][T11443] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x4000000, 0x48a02) 17:26:30 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x46000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406abaaaaaaaa00"], 0xfffffdef) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x5460, 0x4) 17:26:30 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x810, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8071}, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="8b3077ee4b2788d9690147b0bf5857761aee6b25b98fd8dbed1948a588b52eb985ad21ed2e7443d215a6ab462f338de701c39772bc0e1821b956401a3340619c3c6427844835c5edb52a2ad728f6459ad6aa046c00cfccc9a995dcc5dc3f89305c06bb28db36") write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x8040000, 0x48a02) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8000, 0x20, 0x82, 0x6}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd70000600"/18, @ANYRES32=r3, @ANYBLOB="13ac990001000000498533c5e3c5b909ecc3d9842097542adae4ead2e0e15b65cca9223c0bf3bd764c7e24cf2c04c018fe207947649351773809b22cb6c8b413800c187225bff7fd61c61928b35af954337cfc1998e04054a0f9e3da57000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f20b228b69ab"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8000, 0x20, 0x82, 0x6}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd70000600"/18, @ANYRES32=r3, @ANYBLOB="13ac990001000000498533c5e3c5b909ecc3d9842097542adae4ead2e0e15b65cca9223c0bf3bd764c7e24cf2c04c018fe207947649351773809b22cb6c8b413800c187225bff7fd61c61928b35af954337cfc1998e04054a0f9e3da57000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f20b228b69ab"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) 17:26:30 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) [ 2314.437599][T11461] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x58200) r2 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x83a, 0x38, 0x3f, 0x9, r2}) write$bt_hci(r0, &(0x7f0000000140)={0x1, @write_eir={{0xc52, 0xf1}, {0x2, "302ea18cef1bd6c79b9fed43baa5429e9cc9ce19cfa4451700c88ab54e29f4d283d51b73faabe995213dfab3388db22bf67eae54ea4b1b1a2d97709b2746df8fdf91f2d5d057c3b9ccf0d01a7bbc4875a75fc0731b655ed43c0a0c1434f4d62aea14442355fab731b46bef0492c3fd611edf5fea5db96f9687669d7772fa7d38268f566bed9ad7c6050f9f702b9afb6174ed7668747363adaf93448795a427151dffc28c34b5cc949714d98e7a380a022b63b4da06451379b104ed1d2004e365219848378bdcf78ae6742033f4d53c7c22af406bd9b22146de2128fabe611a1703b83fbb9d3c40d6ab9948ebffa702bc"}}}, 0xf5) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x18000000, 0x48a02) 17:26:30 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x46000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406abaaaaaaaa00"], 0xfffffdef) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x5460, 0x4) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x3f000000, 0x48a02) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\x00:\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002bbd7000fedbdf251200000008000600de149729ce19167c67ce210cbbce7a9aa4bce57cf0336dd49c4e91a91049a662d58e60fb1c7e8148570944bdab31537e1384d3fd88eb3d6d1f89f82dbc6ee48d0d62fa40d47c8015a29375bf29322573a66722a445de488242fdc3d44a7e8bf302e7161e55023df70e9c07197ff267cf8f6769cfb64dc60729b7413facc53b252e1d81b23b79cfef5ffc07d4b1c26180a5c9f05b", @ANYRES32=r4, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = getpid() getpgid(r6) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)={0x64, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) [ 2314.499017][T11501] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x40000000, 0x48a02) 17:26:30 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x46000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406abaaaaaaaa00"], 0xfffffdef) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x5460, 0x4) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\x00:\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002bbd7000fedbdf251200000008000600de149729ce19167c67ce210cbbce7a9aa4bce57cf0336dd49c4e91a91049a662d58e60fb1c7e8148570944bdab31537e1384d3fd88eb3d6d1f89f82dbc6ee48d0d62fa40d47c8015a29375bf29322573a66722a445de488242fdc3d44a7e8bf302e7161e55023df70e9c07197ff267cf8f6769cfb64dc60729b7413facc53b252e1d81b23b79cfef5ffc07d4b1c26180a5c9f05b", @ANYRES32=r4, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = getpid() getpgid(r6) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)={0x64, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\x00:\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002bbd7000fedbdf251200000008000600de149729ce19167c67ce210cbbce7a9aa4bce57cf0336dd49c4e91a91049a662d58e60fb1c7e8148570944bdab31537e1384d3fd88eb3d6d1f89f82dbc6ee48d0d62fa40d47c8015a29375bf29322573a66722a445de488242fdc3d44a7e8bf302e7161e55023df70e9c07197ff267cf8f6769cfb64dc60729b7413facc53b252e1d81b23b79cfef5ffc07d4b1c26180a5c9f05b", @ANYRES32=r4, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) getpid() (async) getpgid(r6) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)={0x64, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) (async) [ 2314.576492][T11520] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x810, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8071}, 0x1) (async, rerun: 64) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="8b3077ee4b2788d9690147b0bf5857761aee6b25b98fd8dbed1948a588b52eb985ad21ed2e7443d215a6ab462f338de701c39772bc0e1821b956401a3340619c3c6427844835c5edb52a2ad728f6459ad6aa046c00cfccc9a995dcc5dc3f89305c06bb28db36") (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0xf6ffffff, 0x48a02) 17:26:30 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}}, 0x800) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) [ 2314.616663][T11528] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\x00:\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002bbd7000fedbdf251200000008000600de149729ce19167c67ce210cbbce7a9aa4bce57cf0336dd49c4e91a91049a662d58e60fb1c7e8148570944bdab31537e1384d3fd88eb3d6d1f89f82dbc6ee48d0d62fa40d47c8015a29375bf29322573a66722a445de488242fdc3d44a7e8bf302e7161e55023df70e9c07197ff267cf8f6769cfb64dc60729b7413facc53b252e1d81b23b79cfef5ffc07d4b1c26180a5c9f05b", @ANYRES32=r4, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = getpid() getpgid(r6) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)={0x64, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\x00:\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002bbd7000fedbdf251200000008000600de149729ce19167c67ce210cbbce7a9aa4bce57cf0336dd49c4e91a91049a662d58e60fb1c7e8148570944bdab31537e1384d3fd88eb3d6d1f89f82dbc6ee48d0d62fa40d47c8015a29375bf29322573a66722a445de488242fdc3d44a7e8bf302e7161e55023df70e9c07197ff267cf8f6769cfb64dc60729b7413facc53b252e1d81b23b79cfef5ffc07d4b1c26180a5c9f05b", @ANYRES32=r4, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) getpid() (async) getpgid(r6) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)={0x64, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) (async) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0xfeffffff, 0x48a02) 17:26:30 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x58200) (async) r2 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x83a, 0x38, 0x3f, 0x9, r2}) (async) write$bt_hci(r0, &(0x7f0000000140)={0x1, @write_eir={{0xc52, 0xf1}, {0x2, "302ea18cef1bd6c79b9fed43baa5429e9cc9ce19cfa4451700c88ab54e29f4d283d51b73faabe995213dfab3388db22bf67eae54ea4b1b1a2d97709b2746df8fdf91f2d5d057c3b9ccf0d01a7bbc4875a75fc0731b655ed43c0a0c1434f4d62aea14442355fab731b46bef0492c3fd611edf5fea5db96f9687669d7772fa7d38268f566bed9ad7c6050f9f702b9afb6174ed7668747363adaf93448795a427151dffc28c34b5cc949714d98e7a380a022b63b4da06451379b104ed1d2004e365219848378bdcf78ae6742033f4d53c7c22af406bd9b22146de2128fabe611a1703b83fbb9d3c40d6ab9948ebffa702bc"}}}, 0xf5) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffff6, 0x48a02) 17:26:30 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x58200) (async) r2 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x83a, 0x38, 0x3f, 0x9, r2}) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000140)={0x1, @write_eir={{0xc52, 0xf1}, {0x2, "302ea18cef1bd6c79b9fed43baa5429e9cc9ce19cfa4451700c88ab54e29f4d283d51b73faabe995213dfab3388db22bf67eae54ea4b1b1a2d97709b2746df8fdf91f2d5d057c3b9ccf0d01a7bbc4875a75fc0731b655ed43c0a0c1434f4d62aea14442355fab731b46bef0492c3fd611edf5fea5db96f9687669d7772fa7d38268f566bed9ad7c6050f9f702b9afb6174ed7668747363adaf93448795a427151dffc28c34b5cc949714d98e7a380a022b63b4da06451379b104ed1d2004e365219848378bdcf78ae6742033f4d53c7c22af406bd9b22146de2128fabe611a1703b83fbb9d3c40d6ab9948ebffa702bc"}}}, 0xf5) (rerun: 64) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffe, 0x48a02) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) uname(&(0x7f0000000540)=""/233) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdff42eacdb5443f73500", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x1000000000000, 0x48a02) [ 2314.701584][T11543] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x810, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8071}, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="8b3077ee4b2788d9690147b0bf5857761aee6b25b98fd8dbed1948a588b52eb985ad21ed2e7443d215a6ab462f338de701c39772bc0e1821b956401a3340619c3c6427844835c5edb52a2ad728f6459ad6aa046c00cfccc9a995dcc5dc3f89305c06bb28db36") (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x20000000000000, 0x48a02) 17:26:30 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}}, 0x800) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) [ 2314.770189][T11581] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (rerun: 64) uname(&(0x7f0000000540)=""/233) (async, rerun: 32) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdff42eacdb5443f73500", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async, rerun: 32) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) (async, rerun: 32) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000000000, 0x48a02) 17:26:30 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1411, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c0e0) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406a2aaa8fa3ae7b56b97f463e340f83d54bbaaaaaa00"], 0xa) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x200000000000000, 0x48a02) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x300000000000000, 0x48a02) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) uname(&(0x7f0000000540)=""/233) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdff42eacdb5443f73500", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x400000000000000, 0x48a02) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x804000000000000, 0x48a02) 17:26:30 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a14040000000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01060000000100000000"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x80080) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x101}}}, 0x6) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x8, 0x20, 0x800008, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffc, 0x440100) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000600)={0x5, 0x0, 0x6}, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}]) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4044000) [ 2314.908183][T11596] blktrace: Concurrent blktraces are not allowed on loop6 [ 2314.938983][T11611] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}}, 0x800) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x1800000000000000, 0x48a02) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x8, 0x20, 0x800008, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffc, 0x440100) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000600)={0x5, 0x0, 0x6}, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}]) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4044000) 17:26:30 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x501942) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) 17:26:30 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a14040000000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01060000000100000000"], 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x80080) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x101}}}, 0x6) 17:26:30 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1411, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c0e0) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406a2aaa8fa3ae7b56b97f463e340f83d54bbaaaaaa00"], 0xa) 17:26:30 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x501942) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x3f00000000000000, 0x48a02) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x8, 0x20, 0x800008, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffc, 0x440100) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000600)={0x5, 0x0, 0x6}, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}]) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4044000) 17:26:30 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x501942) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x4000000000000000, 0x48a02) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7de}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8010) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004080}, 0x20000800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) socketpair(0x5, 0x4, 0x3f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$bt_l2cap(r7, &(0x7f0000000640)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80800) 17:26:30 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x50}}, 0xd0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) bind$qrtr(r2, &(0x7f0000000240)={0x2a, 0xffffffff, 0x2}, 0xc) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x3f, [0x4, 0x9], 0x81}, 0x10) syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffffffffffff, 0x109a02) 17:26:30 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0x1, 0x8000}, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1}, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x8902, &(0x7f0000000000)) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004020}, 0x20040855) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='/dev/vcsu#\x00'}, 0x30) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000007234019027ec5332da3d0af45572ca2d1be2c46c391a67a1fa74e68d5de5917bae73391a899fa952b20a2fddbec7c2e0c302549fa5f5a54dab19db47d4a3991530c40a1bad5808006a91719f6e30dfcd5b68cffcf81fdd6abbd3701a282a7f5be9fb907748ddc9f29f2d9fb65a710ab7a583143bf1dfa3e8bb345d2bed0711eef1419ae6d084ee31d9a133567213252cfd74fa7349ac07fb3fce5e37570b560f8bf805d31af999a1a660e379224697b1a00314b499820a683462e9c9bf78f15e01cbf0153982f0fecf0c60ae8b73dbec15266ee00764d806334b1a3ed34cd763b750110fed7d83d2c94b9f4705624276c68dd9440000000000"], 0xfffffdef) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0xf6ffffff00000000, 0x48a02) 17:26:30 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a14040000000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01060000000100000000"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x80080) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x101}}}, 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a14040000000000"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01060000000100000000"], 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x80080) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x101}}}, 0x6) (async) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7de}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8010) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004080}, 0x20000800) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) socketpair(0x5, 0x4, 0x3f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$bt_l2cap(r7, &(0x7f0000000640)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80800) [ 2315.156386][T11658] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1411, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c0e0) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406a2aaa8fa3ae7b56b97f463e340f83d54bbaaaaaa00"], 0xa) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1411, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c0e0) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406a2aaa8fa3ae7b56b97f463e340f83d54bbaaaaaa00"], 0xa) (async) 17:26:30 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x50}}, 0xd0) (async, rerun: 64) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) bind$qrtr(r2, &(0x7f0000000240)={0x2a, 0xffffffff, 0x2}, 0xc) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x3f, [0x4, 0x9], 0x81}, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffffffffffff, 0x109a02) 17:26:30 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x50}}, 0xd0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) bind$qrtr(r2, &(0x7f0000000240)={0x2a, 0xffffffff, 0x2}, 0xc) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x3f, [0x4, 0x9], 0x81}, 0x10) syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffffffffffff, 0x109a02) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x50}}, 0xd0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) bind$qrtr(r2, &(0x7f0000000240)={0x2a, 0xffffffff, 0x2}, 0xc) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x3f, [0x4, 0x9], 0x81}, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffffffffffff, 0x109a02) (async) 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7de}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8010) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004080}, 0x20000800) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) socketpair(0x5, 0x4, 0x3f, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$bt_l2cap(r7, &(0x7f0000000640)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80800) 17:26:30 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000019c0)={0xf4, 0x0, &(0x7f0000001880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001540)=ANY=[@ANYBLOB="852a687300110000000000000000000000000000000000008561646600000000090000000000000002000000000000003f00000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="009c48fa801614635b000000"], &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001700)={@ptr={0x70742a85, 0x0, &(0x7f0000001600)=""/197, 0xc5, 0x0, 0x1f}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x3, 0x2, 0x17}}, &(0x7f0000001780)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000017c0)={@flat=@binder={0x73622a85, 0x110b, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000002080)=""/4096, 0x1000, 0x2, 0x1a}, @fda={0x66646185, 0x7, 0x1, 0x40}}, &(0x7f0000001840)={0x0, 0x18, 0x40}}, 0x400}, @request_death={0x400c630e, 0x2}], 0x1f, 0x0, &(0x7f0000001980)="714bc63094b2551cfe12ba19a139b771db74e9f2b94c16e7c28c6c694587c8"}) [ 2315.225993][T11667] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401c5820, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000007000000000b000000"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x2008, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r6 = getpid() getpgid(r6) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000240)=0x8, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20400d1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, r8, 0x0, 0x3, &(0x7f0000000380)='\\:\x00'}, 0x30) 17:26:30 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400000000000, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xa) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x58, 0x1411, 0x200, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4880}, 0x10a0) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0xfeffffff00000000, 0x48a02) [ 2315.291813][T11695] blktrace: Concurrent blktraces are not allowed on loop6 [ 2315.329238][T11705] blktrace: Concurrent blktraces are not allowed on loop6 17:26:30 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0x1, 0x8000}, 0xc) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1}, 0x8) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x8902, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004020}, 0x20040855) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='/dev/vcsu#\x00'}, 0x30) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfffffdef) 17:26:30 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400000000000, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ce0000000000bea877a80165ef7b970610cf66b60ab80e1cd1e3123fdca76e7f533df26bcfd84f5daaae4d4c0193ab9696e7d7f8b25efa861ec342ee05c6de5bd93d5764dcdc001000003ff147ca92c67648ecacbcd59125172436fe7a262febbddd1a5d706587287eadbbb56c2a8448590c256717d33c2d6a3ae5c510fad8766adcb3324cc1f2c2ed6b43d94e1b0e8ab3c2743c447e2838c63871a65cb3ca3ce88764afadfccacf922b73e8936467aa79951d9a65d6291177f01b884a6f13c642acdb0eb2e0192ff10a9a3efb94ad7fc30d8bdcc70073ea579bd5085a3d94e60f0e89556e57a07d46e8c98d5eed7bbf708ae7dace618a11a1ace3f85923831eaeb1e1fe6414"], 0xa) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x58, 0x1411, 0x200, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4880}, 0x10a0) 17:26:30 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffff00000000, 0x48a02) 17:26:31 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401c5820, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000007000000000b000000"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x2008, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r6 = getpid() getpgid(r6) (async) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000240)=0x8, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20400d1) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) (async) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, r8, 0x0, 0x3, &(0x7f0000000380)='\\:\x00'}, 0x30) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x0) 17:26:31 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400000000000, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xa) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x58, 0x1411, 0x200, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4880}, 0x10a0) 17:26:31 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000019c0)={0xf4, 0x0, &(0x7f0000001880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001540)=ANY=[@ANYBLOB="852a687300110000000000000000000000000000000000008561646600000000090000000000000002000000000000003f00000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="009c48fa801614635b000000"], &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001700)={@ptr={0x70742a85, 0x0, &(0x7f0000001600)=""/197, 0xc5, 0x0, 0x1f}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x3, 0x2, 0x17}}, &(0x7f0000001780)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000017c0)={@flat=@binder={0x73622a85, 0x110b, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000002080)=""/4096, 0x1000, 0x2, 0x1a}, @fda={0x66646185, 0x7, 0x1, 0x40}}, &(0x7f0000001840)={0x0, 0x18, 0x40}}, 0x400}, @request_death={0x400c630e, 0x2}], 0x1f, 0x0, &(0x7f0000001980)="714bc63094b2551cfe12ba19a139b771db74e9f2b94c16e7c28c6c694587c8"}) 17:26:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0x1, 0x8000}, 0xc) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1}, 0x8) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x8902, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004020}, 0x20040855) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='/dev/vcsu#\x00'}, 0x30) (async) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfffffdef) 17:26:31 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}}, 0x800) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x0) (async) 17:26:31 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000019c0)={0xf4, 0x0, &(0x7f0000001880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001540)=ANY=[@ANYBLOB="852a687300110000000000000000000000000000000000008561646600000000090000000000000002000000000000003f00000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="009c48fa801614635b000000"], &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001700)={@ptr={0x70742a85, 0x0, &(0x7f0000001600)=""/197, 0xc5, 0x0, 0x1f}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x3, 0x2, 0x17}}, &(0x7f0000001780)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000017c0)={@flat=@binder={0x73622a85, 0x110b, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000002080)=""/4096, 0x1000, 0x2, 0x1a}, @fda={0x66646185, 0x7, 0x1, 0x40}}, &(0x7f0000001840)={0x0, 0x18, 0x40}}, 0x400}, @request_death={0x400c630e, 0x2}], 0x1f, 0x0, &(0x7f0000001980)="714bc63094b2551cfe12ba19a139b771db74e9f2b94c16e7c28c6c694587c8"}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000019c0)={0xf4, 0x0, &(0x7f0000001880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001540)=ANY=[@ANYBLOB="852a687300110000000000000000000000000000000000008561646600000000090000000000000002000000000000003f00000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="009c48fa801614635b000000"], &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x400}, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001700)={@ptr={0x70742a85, 0x0, &(0x7f0000001600)=""/197, 0xc5, 0x0, 0x1f}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x3, 0x2, 0x17}}, &(0x7f0000001780)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000017c0)={@flat=@binder={0x73622a85, 0x110b, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000002080)=""/4096, 0x1000, 0x2, 0x1a}, @fda={0x66646185, 0x7, 0x1, 0x40}}, &(0x7f0000001840)={0x0, 0x18, 0x40}}, 0x400}, @request_death={0x400c630e, 0x2}], 0x1f, 0x0, &(0x7f0000001980)="714bc63094b2551cfe12ba19a139b771db74e9f2b94c16e7c28c6c694587c8"}) (async) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401c5820, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000007000000000b000000"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x2008, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r6 = getpid() getpgid(r6) (async) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000240)=0x8, 0x4) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20400d1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) (async) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, r8, 0x0, 0x3, &(0x7f0000000380)='\\:\x00'}, 0x30) [ 2315.451277][T11725] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x0) (async) 17:26:31 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012bbd7000fedbdf250c000000080d0b0087063bef04939bee962f3fcafc54081800000500"], 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) [ 2315.499729][T11749] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, r1, 0x0, 0xb, &(0x7f0000000240)='/dev/loop#\x00'}, 0x30) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:31 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012bbd7000fedbdf250c000000080d0b0087063bef04939bee962f3fcafc54081800000500"], 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 17:26:31 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012bbd7000fedbdf250c000000080d0b0087063bef04939bee962f3fcafc54081800000500"], 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, r1, 0x0, 0xb, &(0x7f0000000240)='/dev/loop#\x00'}, 0x30) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, r1, 0x0, 0xb, &(0x7f0000000240)='/dev/loop#\x00'}, 0x30) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) [ 2315.579839][T11768] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$l2tp6(r0, &(0x7f0000000040)="a94422256b1e5732679b14c4132ce506f7a8c1b14070ff6a6dff1bb409fef9e4d3e878baf0b29432bd967f0593797dc3027c3112974602e75d993d01a65539b9fe602e8f12", 0x45, 0x20000000, &(0x7f00000000c0)={0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200, 0x4}, 0x20) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="a2aaaaa3b8595bf7785f209f4428d9b1ba00"], 0xfffffdef) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x2e4802) 17:26:31 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}}, 0x800) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:31 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008815) 17:26:31 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, r1, 0x0, 0xb, &(0x7f0000000240)='/dev/loop#\x00'}, 0x30) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, r1, 0x0, 0xb, &(0x7f0000000240)='/dev/loop#\x00'}, 0x30) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) [ 2315.625599][T11775] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x129a02) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0xfffffead}, {0xc9}}}, 0x9) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc840}, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x8, 0x2, 0x9, 0x40, 0x39, 0x0, 0x9}, 0xc) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x2e4802) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf9b797c2d516904a300", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdd4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004800) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x64, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x5, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r9) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x2e4802) syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x2e4802) (async) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffffffc, 0x658282) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) sendto$isdn(r0, &(0x7f0000000000)={0x80000000, 0x400, "987d5f6f999d480f7fdcc25ee834c23f582e73259525105ae70c63ead2533e8c95cbee358abdb75a8c9712c8"}, 0x34, 0x40080c4, &(0x7f0000000080)={0x22, 0x6, 0x81, 0x4, 0x3}, 0x6) [ 2315.668727][T11792] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf9b797c2d516904a300", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdd4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004800) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x64, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x5, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async, rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r9) [ 2315.726627][T11818] blktrace: Concurrent blktraces are not allowed on loop6 [ 2315.755110][T11824] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendto$l2tp6(r0, &(0x7f0000000040)="a94422256b1e5732679b14c4132ce506f7a8c1b14070ff6a6dff1bb409fef9e4d3e878baf0b29432bd967f0593797dc3027c3112974602e75d993d01a65539b9fe602e8f12", 0x45, 0x20000000, &(0x7f00000000c0)={0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200, 0x4}, 0x20) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="a2aaaaa3b8595bf7785f209f4428d9b1ba00"], 0xfffffdef) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffffffc, 0x658282) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) sendto$isdn(r0, &(0x7f0000000000)={0x80000000, 0x400, "987d5f6f999d480f7fdcc25ee834c23f582e73259525105ae70c63ead2533e8c95cbee358abdb75a8c9712c8"}, 0x34, 0x40080c4, &(0x7f0000000080)={0x22, 0x6, 0x81, 0x4, 0x3}, 0x6) 17:26:31 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}}, 0x800) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf9b797c2d516904a300", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdd4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004800) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x64, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x5, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r9) 17:26:31 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x129a02) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0xfffffead}, {0xc9}}}, 0x9) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc840}, 0x1) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x8, 0x2, 0x9, 0x40, 0x39, 0x0, 0x9}, 0xc) 17:26:31 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008815) 17:26:31 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008815) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008815) (async) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffffffc, 0x658282) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) sendto$isdn(r0, &(0x7f0000000000)={0x80000000, 0x400, "987d5f6f999d480f7fdcc25ee834c23f582e73259525105ae70c63ead2533e8c95cbee358abdb75a8c9712c8"}, 0x34, 0x40080c4, &(0x7f0000000080)={0x22, 0x6, 0x81, 0x4, 0x3}, 0x6) 17:26:31 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x129a02) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0xfffffead}, {0xc9}}}, 0x9) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc840}, 0x1) (rerun: 32) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x8, 0x2, 0x9, 0x40, 0x39, 0x0, 0x9}, 0xc) 17:26:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$l2tp6(r0, &(0x7f0000000040)="a94422256b1e5732679b14c4132ce506f7a8c1b14070ff6a6dff1bb409fef9e4d3e878baf0b29432bd967f0593797dc3027c3112974602e75d993d01a65539b9fe602e8f12", 0x45, 0x20000000, &(0x7f00000000c0)={0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200, 0x4}, 0x20) (async) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="a2aaaaa3b8595bf7785f209f4428d9b1ba00"], 0xfffffdef) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0x40004) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x48a02) [ 2315.841257][T11839] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0x40004) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0x40004) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r7) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0x40004) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r7 = getpid() getpgid(r7) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) [ 2315.909263][T11859] blktrace: Concurrent blktraces are not allowed on loop6 [ 2315.934876][T11866] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600f85cd0c5ed8eeca68f54e90e3b52b7a5d630479d5daa5b17f3e28a90b82bb9186a7bed9d7f98ceb720d1a2c1ca04671f9a73d3613cb469cb7fb96ab0c6abb5695e34d4be3937975eee035581a9dc25a3bf7fbda069b366170d2c2993d6760d4df9117dbc202b83eedcc2f4fe110873d4d6f9492be414dd95507ee0cba0549cfafa", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r2, 0x120, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffc}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x6c}}, 0x88d0) getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000540)=""/211, 0xd3, 0x2042, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x20) 17:26:31 executing program 3: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x20) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 17:26:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x109a00) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x48a02) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x48a02) (async) [ 2315.965258][T11885] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 3: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x20) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 17:26:31 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aa0600000000"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000080)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x10000, 0x80000001, 0x1, 0xffff, 0x0, 0x8}}}, 0x19) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600f85cd0c5ed8eeca68f54e90e3b52b7a5d630479d5daa5b17f3e28a90b82bb9186a7bed9d7f98ceb720d1a2c1ca04671f9a73d3613cb469cb7fb96ab0c6abb5695e34d4be3937975eee035581a9dc25a3bf7fbda069b366170d2c2993d6760d4df9117dbc202b83eedcc2f4fe110873d4d6f9492be414dd95507ee0cba0549cfafa", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r2, 0x120, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffc}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x6c}}, 0x88d0) (async) getpgid(r5) (async, rerun: 32) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async, rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000540)=""/211, 0xd3, 0x2042, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x20) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x48a02) 17:26:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x109a00) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) [ 2316.024972][T11890] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600f85cd0c5ed8eeca68f54e90e3b52b7a5d630479d5daa5b17f3e28a90b82bb9186a7bed9d7f98ceb720d1a2c1ca04671f9a73d3613cb469cb7fb96ab0c6abb5695e34d4be3937975eee035581a9dc25a3bf7fbda069b366170d2c2993d6760d4df9117dbc202b83eedcc2f4fe110873d4d6f9492be414dd95507ee0cba0549cfafa", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r2, 0x120, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffc}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x6c}}, 0x88d0) getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000540)=""/211, 0xd3, 0x2042, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600f85cd0c5ed8eeca68f54e90e3b52b7a5d630479d5daa5b17f3e28a90b82bb9186a7bed9d7f98ceb720d1a2c1ca04671f9a73d3613cb469cb7fb96ab0c6abb5695e34d4be3937975eee035581a9dc25a3bf7fbda069b366170d2c2993d6760d4df9117dbc202b83eedcc2f4fe110873d4d6f9492be414dd95507ee0cba0549cfafa", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r2, 0x120, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffc}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x6c}}, 0x88d0) (async) getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000540)=""/211, 0xd3, 0x2042, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x20) (async) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x101, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x20, 0x7, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) [ 2316.074950][T11907] blktrace: Concurrent blktraces are not allowed on loop6 [ 2316.108079][T11916] blktrace: Concurrent blktraces are not allowed on loop6 [ 2316.142624][T11925] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x101, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x20, 0x7, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:31 executing program 3: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x20) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 17:26:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x109a00) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:31 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aa0600000000"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x10000, 0x80000001, 0x1, 0xffff, 0x0, 0x8}}}, 0x19) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) socketpair(0x10, 0x800, 0xfa79, &(0x7f0000000080)={0xffffffffffffffff}) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x3, 0x4000}, 0xc) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x101, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x20, 0x7, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) (async, rerun: 64) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (rerun: 64) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x7800, 0x8, 0x3f}}) socketpair(0x26, 0x6, 0x8001, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090e000000000000000004000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r5, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x4048016) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x8001) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0xffffffffffffffec}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) [ 2316.216992][T11933] blktrace: Concurrent blktraces are not allowed on loop6 [ 2316.249744][T11944] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x7800, 0x8, 0x3f}}) (async) socketpair(0x26, 0x6, 0x8001, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090e000000000000000004000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r5, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x4048016) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x8001) (async, rerun: 32) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (rerun: 32) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r7 = getpid() getpgid(r7) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0xffffffffffffffec}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x7800, 0x8, 0x3f}}) (async) socketpair(0x26, 0x6, 0x8001, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090e000000000000000004000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r5, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x4048016) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x8001) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0xffffffffffffffec}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffd, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x220000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1411, 0x4, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r6, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0xc041) socket$isdn(0x22, 0x3, 0x33381d6fba6a9d8) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB="8201458a1998265b7480d8c85a0943667e7c48edfdb3e1d847cef9790e1e9d2b5eec9d7daff27bc61548d0731b1093cd1faf5720d46e4f9cfa2cb511fe356f14a0279f99dafe6857ab7f816dce4a0b5e0be6937f1a8c906549614f9cf9b437dfe52c5d843b59a11a9d98b04954f3757f97b8146f32ae4fa9ee25877fe1e1b5d7cae476dc3dac69b137ebb663a710e0c9e541730209987c4af83753010c51245f8ea27f17e0b65db385276c68cc9426791c18a538bd4702b62627afca04bce8", @ANYRESOCT=r0, @ANYRES8=r7], 0xf8) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) socketpair(0x10, 0x800, 0xfa79, &(0x7f0000000080)={0xffffffffffffffff}) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x3, 0x4000}, 0xc) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) socketpair(0x10, 0x800, 0xfa79, &(0x7f0000000080)) (async) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x3, 0x4000}, 0xc) (async) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) (async) [ 2316.287672][T11950] blktrace: Concurrent blktraces are not allowed on loop6 17:26:31 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:31 executing program 3: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x84e03) 17:26:31 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aa0600000000"], 0xfffffdef) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x10000, 0x80000001, 0x1, 0xffff, 0x0, 0x8}}}, 0x19) (rerun: 64) 17:26:31 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) socketpair(0x10, 0x800, 0xfa79, &(0x7f0000000080)={0xffffffffffffffff}) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x3, 0x4000}, 0xc) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) socketpair(0x10, 0x800, 0xfa79, &(0x7f0000000080)) (async) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x3, 0x4000}, 0xc) (async) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) (async) 17:26:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffd, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x220000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1411, 0x4, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r6, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0xc041) (async) socket$isdn(0x22, 0x3, 0x33381d6fba6a9d8) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB="8201458a1998265b7480d8c85a0943667e7c48edfdb3e1d847cef9790e1e9d2b5eec9d7daff27bc61548d0731b1093cd1faf5720d46e4f9cfa2cb511fe356f14a0279f99dafe6857ab7f816dce4a0b5e0be6937f1a8c906549614f9cf9b437dfe52c5d843b59a11a9d98b04954f3757f97b8146f32ae4fa9ee25877fe1e1b5d7cae476dc3dac69b137ebb663a710e0c9e541730209987c4af83753010c51245f8ea27f17e0b65db385276c68cc9426791c18a538bd4702b62627afca04bce8", @ANYRESOCT=r0, @ANYRES8=r7], 0xf8) 17:26:31 executing program 3: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x84e03) 17:26:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680), 0xc, &(0x7f0000000c40)={&(0x7f0000000600)={0x14, r2, 0x1, 0xffffffff, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24004814) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x20) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:31 executing program 3: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x84e03) 17:26:31 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffd, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x220000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1411, 0x4, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x21}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r6, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0xc041) socket$isdn(0x22, 0x3, 0x33381d6fba6a9d8) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB="8201458a1998265b7480d8c85a0943667e7c48edfdb3e1d847cef9790e1e9d2b5eec9d7daff27bc61548d0731b1093cd1faf5720d46e4f9cfa2cb511fe356f14a0279f99dafe6857ab7f816dce4a0b5e0be6937f1a8c906549614f9cf9b437dfe52c5d843b59a11a9d98b04954f3757f97b8146f32ae4fa9ee25877fe1e1b5d7cae476dc3dac69b137ebb663a710e0c9e541730209987c4af83753010c51245f8ea27f17e0b65db385276c68cc9426791c18a538bd4702b62627afca04bce8", @ANYRESOCT=r0, @ANYRES8=r7], 0xf8) 17:26:32 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x80000001, 0x8002) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 17:26:32 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) socketpair(0x21, 0xa, 0x10000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x6, 0x4, 0xe9, 0x4, 0x20, 0x938b}}}, 0x12) 17:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680), 0xc, &(0x7f0000000c40)={&(0x7f0000000600)={0x14, r2, 0x1, 0xffffffff, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24004814) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x20) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r7 = getpid() getpgid(r7) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) [ 2316.429908][T11991] blktrace: Concurrent blktraces are not allowed on loop6 17:26:32 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:32 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1411, 0x10, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40) 17:26:32 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:26:32 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 32) socketpair(0x21, 0xa, 0x10000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x6, 0x4, 0xe9, 0x4, 0x20, 0x938b}}}, 0x12) 17:26:32 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x80000001, 0x8002) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 17:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680), 0xc, &(0x7f0000000c40)={&(0x7f0000000600)={0x14, r2, 0x1, 0xffffffff, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24004814) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x20) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680), 0xc, &(0x7f0000000c40)={&(0x7f0000000600)={0x14, r2, 0x1, 0xffffffff, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24004814) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x20) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r7) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) 17:26:32 executing program 5: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:32 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1411, 0x10, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40) 17:26:32 executing program 5: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:32 executing program 5: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r3, &(0x7f0000000540), &(0x7f00000005c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r3}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'sit0\x00', r4, 0x80, 0x8, 0x8001, 0xff, {{0x10, 0x4, 0x2, 0x6, 0x40, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xfd, 0x0, 0x9, [0x100, 0x100, 0x8, 0x1f, 0x4, 0x6, 0x987, 0x6a80, 0x1]}]}}}}}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000240)=0x9, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:32 executing program 5: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r3, &(0x7f0000000540), &(0x7f00000005c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r3}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'sit0\x00', r4, 0x80, 0x8, 0x8001, 0xff, {{0x10, 0x4, 0x2, 0x6, 0x40, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xfd, 0x0, 0x9, [0x100, 0x100, 0x8, 0x1f, 0x4, 0x6, 0x987, 0x6a80, 0x1]}]}}}}}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000240)=0x9, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) getpeername$qrtr(r3, &(0x7f0000000540), &(0x7f00000005c0)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r3}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'sit0\x00', r4, 0x80, 0x8, 0x8001, 0xff, {{0x10, 0x4, 0x2, 0x6, 0x40, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xfd, 0x0, 0x9, [0x100, 0x100, 0x8, 0x1f, 0x4, 0x6, 0x987, 0x6a80, 0x1]}]}}}}}) (async) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r7) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000240)=0x9, 0x4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) [ 2316.936532][T12028] blktrace: Concurrent blktraces are not allowed on loop6 [ 2316.975035][T12058] blktrace: Concurrent blktraces are not allowed on loop6 17:26:32 executing program 5: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) [ 2317.004228][T12066] blktrace: Concurrent blktraces are not allowed on loop6 17:26:32 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:26:32 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) socketpair(0x21, 0xa, 0x10000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x6, 0x4, 0xe9, 0x4, 0x20, 0x938b}}}, 0x12) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) socketpair(0x21, 0xa, 0x10000, &(0x7f0000000000)) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x6, 0x4, 0xe9, 0x4, 0x20, 0x938b}}}, 0x12) (async) 17:26:32 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x80000001, 0x8002) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x80000001, 0x8002) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async) 17:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r3, &(0x7f0000000540), &(0x7f00000005c0)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r3}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'sit0\x00', r4, 0x80, 0x8, 0x8001, 0xff, {{0x10, 0x4, 0x2, 0x6, 0x40, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xfd, 0x0, 0x9, [0x100, 0x100, 0x8, 0x1f, 0x4, 0x6, 0x987, 0x6a80, 0x1]}]}}}}}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000240)=0x9, 0x4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:32 executing program 5: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:32 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1411, 0x10, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40) 17:26:32 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:32 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x1e200) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f00000000c0)) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2263043af67e8f74f68cc040030000003b5ee17fa2b618a6961e36536a04ae4236278c60d106456825a7d0081094d82e5b5001d9612e07b69d66e67519766e3504594afb51ebcb5d4aec162f6ba360a2185993fe10bd4f26899e4605f76c9c34a6334c9e43a4414ec46f831b84fd3f22a85067eb546b4779a149994227e48b12a00667c408ced0ac5c7b7782f36bf8d35e4ee37832cef89add468ac95d8a8ab199603948d6298fcbe1b7cacfe055dcae578887173b71a83abf5269e464a27c802035ebc40199d6e412d4e2c3f0cd947443fd2e666308650427090300ed27000cf72a8bb78c41cd1db6c583d0e8a35d9c"], 0x98, 0x0, &(0x7f0000000180)="e9469a13f9cb470a94a61a51beb81ae3526cce8bc028255f3c790485f0bbb5ad512127c7bde7285e8176f73376e850cd5131f7149b9b7fdb233f281bb3b3589949264edbe691be0a2cbb37279d62689cb09ba5b47ca77e46ec9338e1a174f3f208d7cd954c3641ae5d893d7768189d7a788d139f4af946558f09ae0a5b96dd93c81c0934955ab695ea0c7bfa983e7ae37e0e1dacd274bdf0"}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000240)='ns/net\x00') getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) [ 2317.187131][T12092] blktrace: Concurrent blktraces are not allowed on loop6 17:26:32 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async, rerun: 32) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (rerun: 32) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000240)='ns/net\x00') (async) getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:32 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) [ 2317.228563][T12106] blktrace: Concurrent blktraces are not allowed on loop6 [ 2317.261921][T12115] blktrace: Concurrent blktraces are not allowed on loop6 17:26:32 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:26:32 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="381e9a14899c41a31443ee490b010c0406aaaaaaaaaa006c91e8d131"], 0xfffffdef) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x800, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x8000) 17:26:32 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000240)='ns/net\x00') getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) syz_open_procfs$namespace(r5, &(0x7f0000000240)='ns/net\x00') (async) getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) 17:26:32 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x8, 0x4) 17:26:32 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x1e200) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f00000000c0)) (async) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2263043af67e8f74f68cc040030000003b5ee17fa2b618a6961e36536a04ae4236278c60d106456825a7d0081094d82e5b5001d9612e07b69d66e67519766e3504594afb51ebcb5d4aec162f6ba360a2185993fe10bd4f26899e4605f76c9c34a6334c9e43a4414ec46f831b84fd3f22a85067eb546b4779a149994227e48b12a00667c408ced0ac5c7b7782f36bf8d35e4ee37832cef89add468ac95d8a8ab199603948d6298fcbe1b7cacfe055dcae578887173b71a83abf5269e464a27c802035ebc40199d6e412d4e2c3f0cd947443fd2e666308650427090300ed27000cf72a8bb78c41cd1db6c583d0e8a35d9c"], 0x98, 0x0, &(0x7f0000000180)="e9469a13f9cb470a94a61a51beb81ae3526cce8bc028255f3c790485f0bbb5ad512127c7bde7285e8176f73376e850cd5131f7149b9b7fdb233f281bb3b3589949264edbe691be0a2cbb37279d62689cb09ba5b47ca77e46ec9338e1a174f3f208d7cd954c3641ae5d893d7768189d7a788d139f4af946558f09ae0a5b96dd93c81c0934955ab695ea0c7bfa983e7ae37e0e1dacd274bdf0"}) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80a6, 0x20, 0x8, 0x3f}}) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x101080) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000640)=0x2, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xc8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80a6, 0x20, 0x8, 0x3f}}) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x101080) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000640)=0x2, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xc8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80a6, 0x20, 0x8, 0x3f}}) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x101080) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000640)=0x2, 0x4) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xc8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r7) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) [ 2317.372896][T12129] blktrace: Concurrent blktraces are not allowed on loop6 [ 2317.398665][T12151] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80a6, 0x20, 0x8, 0x3f}}) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x101080) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000640)=0x2, 0x4) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xc8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) (async) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r7 = getpid() getpgid(r7) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async, rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r7}) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) [ 2317.419002][T12155] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_local_amp_assoc={{0x140a, 0x11}, {0xc8}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c040100aaaaaaaa00"], 0xfffffdef) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00'], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00'], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00'], 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) 17:26:33 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x8, 0x4) 17:26:33 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="381e9a14899c41a31443ee490b010c0406aaaaaaaaaa006c91e8d131"], 0xfffffdef) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x800, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x8000) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="381e9a14899c41a31443ee490b010c0406aaaaaaaaaa006c91e8d131"], 0xfffffdef) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x800, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x8000) (async) [ 2317.443372][T12162] blktrace: Concurrent blktraces are not allowed on loop6 [ 2317.474975][T12167] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:33 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x1e200) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f00000000c0)) (async) ioctl$IMCLEAR_L2(r0, 0x80044946, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2263043af67e8f74f68cc040030000003b5ee17fa2b618a6961e36536a04ae4236278c60d106456825a7d0081094d82e5b5001d9612e07b69d66e67519766e3504594afb51ebcb5d4aec162f6ba360a2185993fe10bd4f26899e4605f76c9c34a6334c9e43a4414ec46f831b84fd3f22a85067eb546b4779a149994227e48b12a00667c408ced0ac5c7b7782f36bf8d35e4ee37832cef89add468ac95d8a8ab199603948d6298fcbe1b7cacfe055dcae578887173b71a83abf5269e464a27c802035ebc40199d6e412d4e2c3f0cd947443fd2e666308650427090300ed27000cf72a8bb78c41cd1db6c583d0e8a35d9c"], 0x98, 0x0, &(0x7f0000000180)="e9469a13f9cb470a94a61a51beb81ae3526cce8bc028255f3c790485f0bbb5ad512127c7bde7285e8176f73376e850cd5131f7149b9b7fdb233f281bb3b3589949264edbe691be0a2cbb37279d62689cb09ba5b47ca77e46ec9338e1a174f3f208d7cd954c3641ae5d893d7768189d7a788d139f4af946558f09ae0a5b96dd93c81c0934955ab695ea0c7bfa983e7ae37e0e1dacd274bdf0"}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00'], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async, rerun: 64) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (rerun: 64) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000400"/14], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="3f343ff81398875f5734886315cfbe0ead00969e370a4d445f7f4ed217961c23d639018005c9292f1082ff4b940f63bb45e7bd29d4065325ca96c7b6ce0c1fe93fb6cb63ce9702569f8f4d2503f0276bced769cc17ba0b15eaa37ee17997e9900a1f8cdb410091caeb9c3562e86f3df1a7c50345c0050b9d05d23b8f3cfdd961664dffd6b8a8b03ed46791802e23a565b6c4633668947e59d98f734f5c3e0edcb88a193ba1b821f13d0667d85eb4d952c2d6bd0035c3c249d524a3d885080b760fc9ba890e11c56647b4c48ccb15d10ea7a896fcb7445f7e1c29970391d4a1fd9fdbeb045c904ab04045bc7d"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x7, 0xdd08, 0xa, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) syz_open_dev$loop(&(0x7f0000000240), 0x3, 0x480080) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) [ 2317.516847][T12172] blktrace: Concurrent blktraces are not allowed on loop6 [ 2317.555176][T12189] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000400"/14], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="3f343ff81398875f5734886315cfbe0ead00969e370a4d445f7f4ed217961c23d639018005c9292f1082ff4b940f63bb45e7bd29d4065325ca96c7b6ce0c1fe93fb6cb63ce9702569f8f4d2503f0276bced769cc17ba0b15eaa37ee17997e9900a1f8cdb410091caeb9c3562e86f3df1a7c50345c0050b9d05d23b8f3cfdd961664dffd6b8a8b03ed46791802e23a565b6c4633668947e59d98f734f5c3e0edcb88a193ba1b821f13d0667d85eb4d952c2d6bd0035c3c249d524a3d885080b760fc9ba890e11c56647b4c48ccb15d10ea7a896fcb7445f7e1c29970391d4a1fd9fdbeb045c904ab04045bc7d"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x7, 0xdd08, 0xa, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) syz_open_dev$loop(&(0x7f0000000240), 0x3, 0x480080) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000400"/14], 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="3f343ff81398875f5734886315cfbe0ead00969e370a4d445f7f4ed217961c23d639018005c9292f1082ff4b940f63bb45e7bd29d4065325ca96c7b6ce0c1fe93fb6cb63ce9702569f8f4d2503f0276bced769cc17ba0b15eaa37ee17997e9900a1f8cdb410091caeb9c3562e86f3df1a7c50345c0050b9d05d23b8f3cfdd961664dffd6b8a8b03ed46791802e23a565b6c4633668947e59d98f734f5c3e0edcb88a193ba1b821f13d0667d85eb4d952c2d6bd0035c3c249d524a3d885080b760fc9ba890e11c56647b4c48ccb15d10ea7a896fcb7445f7e1c29970391d4a1fd9fdbeb045c904ab04045bc7d"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x7, 0xdd08, 0xa, 0x6}) (async) getpid() (async) getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) syz_open_dev$loop(&(0x7f0000000240), 0x3, 0x480080) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000400"/14], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="3f343ff81398875f5734886315cfbe0ead00969e370a4d445f7f4ed217961c23d639018005c9292f1082ff4b940f63bb45e7bd29d4065325ca96c7b6ce0c1fe93fb6cb63ce9702569f8f4d2503f0276bced769cc17ba0b15eaa37ee17997e9900a1f8cdb410091caeb9c3562e86f3df1a7c50345c0050b9d05d23b8f3cfdd961664dffd6b8a8b03ed46791802e23a565b6c4633668947e59d98f734f5c3e0edcb88a193ba1b821f13d0667d85eb4d952c2d6bd0035c3c249d524a3d885080b760fc9ba890e11c56647b4c48ccb15d10ea7a896fcb7445f7e1c29970391d4a1fd9fdbeb045c904ab04045bc7d"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x7, 0xdd08, 0xa, 0x6}) (async) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) syz_open_dev$loop(&(0x7f0000000240), 0x3, 0x480080) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:33 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_local_amp_assoc={{0x140a, 0x11}, {0xc8}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c040100aaaaaaaa00"], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_local_amp_assoc={{0x140a, 0x11}, {0xc8}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c040100aaaaaaaa00"], 0xfffffdef) (async) [ 2317.581214][T12200] blktrace: Concurrent blktraces are not allowed on loop6 [ 2317.603118][T12203] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) r6 = syz_open_dev$vcsu(&(0x7f0000000240), 0x20, 0x109000) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf251200000008000b0000000000050033000000000005002d000000000008003b00000000000600280004b4613f7505002900010000000500330002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x75}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r7, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x45}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:33 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:33 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x8, 0x4) 17:26:33 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c73484a01268e4a921d2ce0edf5d624525790e81c43970841e17e5c2426381278a092e273f3eb34a2f913536bb86e6b45af18b03c5c3d127a7e1f897ad97bc6696f120f79d42e67ce0f7bbb50661ff4b07cc9c324931c988d4c584f5d", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250f0000000800340005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 17:26:33 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="381e9a14899c41a31443ee490b010c0406aaaaaaaaaa006c91e8d131"], 0xfffffdef) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x800, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x8000) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) r6 = syz_open_dev$vcsu(&(0x7f0000000240), 0x20, 0x109000) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf251200000008000b0000000000050033000000000005002d000000000008003b00000000000600280004b4613f7505002900010000000500330002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x75}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r7, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x45}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) syz_open_dev$vcsu(&(0x7f0000000240), 0x20, 0x109000) (async) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf251200000008000b0000000000050033000000000005002d000000000008003b00000000000600280004b4613f7505002900010000000500330002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x75}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r1) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r7, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x45}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) [ 2317.638530][T12222] blktrace: Concurrent blktraces are not allowed on loop6 [ 2317.674649][T12228] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) r6 = syz_open_dev$vcsu(&(0x7f0000000240), 0x20, 0x109000) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf251200000008000b0000000000050033000000000005002d000000000008003b00000000000600280004b4613f7505002900010000000500330002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x75}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r7, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x45}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:33 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:33 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_local_amp_assoc={{0x140a, 0x11}, {0xc8}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c040100aaaaaaaa00"], 0xfffffdef) 17:26:33 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="188000950000000000400000000000000000000000000000ba339d65a215cde31018e64787e7fb2f00"/52], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a82) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0xfffffffffffffffe, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000440)={r4, r3}) write$cgroup_int(r4, &(0x7f0000000200)=0x8, 0x12) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r7) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x1c}}, 0x40) r10 = syz_open_dev$vcsu(&(0x7f0000000240), 0x2, 0x2000) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) 17:26:33 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c73484a01268e4a921d2ce0edf5d624525790e81c43970841e17e5c2426381278a092e273f3eb34a2f913536bb86e6b45af18b03c5c3d127a7e1f897ad97bc6696f120f79d42e67ce0f7bbb50661ff4b07cc9c324931c988d4c584f5d", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250f0000000800340005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c73484a01268e4a921d2ce0edf5d624525790e81c43970841e17e5c2426381278a092e273f3eb34a2f913536bb86e6b45af18b03c5c3d127a7e1f897ad97bc6696f120f79d42e67ce0f7bbb50661ff4b07cc9c324931c988d4c584f5d", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250f0000000800340005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) 17:26:33 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0xc000003b, &(0x7f0000000540)="805e458faa839c6892f9bdb4fd5593736fad65f41826dc0d6af2d626567ec5fb1449d96ab21da7872cff858ded44d6db823c37a66576719ec672badedc7ef5afe01f5889639a76d461177686feda21f9159294fc7d06dd60754c7493680cf3d7d28c7d8d06a7d03d9188daf5a5") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = syz_open_dev$vcsu(&(0x7f0000000240), 0x100000000, 0x1042) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) [ 2317.710029][T12238] blktrace: Concurrent blktraces are not allowed on loop6 [ 2317.737959][T12256] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0xc000003b, &(0x7f0000000540)="805e458faa839c6892f9bdb4fd5593736fad65f41826dc0d6af2d626567ec5fb1449d96ab21da7872cff858ded44d6db823c37a66576719ec672badedc7ef5afe01f5889639a76d461177686feda21f9159294fc7d06dd60754c7493680cf3d7d28c7d8d06a7d03d9188daf5a5") (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000240), 0x100000000, 0x1042) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) 17:26:33 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0xc000003b, &(0x7f0000000540)="805e458faa839c6892f9bdb4fd5593736fad65f41826dc0d6af2d626567ec5fb1449d96ab21da7872cff858ded44d6db823c37a66576719ec672badedc7ef5afe01f5889639a76d461177686feda21f9159294fc7d06dd60754c7493680cf3d7d28c7d8d06a7d03d9188daf5a5") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = syz_open_dev$vcsu(&(0x7f0000000240), 0x100000000, 0x1042) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0xc000003b, &(0x7f0000000540)="805e458faa839c6892f9bdb4fd5593736fad65f41826dc0d6af2d626567ec5fb1449d96ab21da7872cff858ded44d6db823c37a66576719ec672badedc7ef5afe01f5889639a76d461177686feda21f9159294fc7d06dd60754c7493680cf3d7d28c7d8d06a7d03d9188daf5a5") (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) syz_open_dev$vcsu(&(0x7f0000000240), 0x100000000, 0x1042) (async) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) (async) [ 2317.789216][T12269] blktrace: Concurrent blktraces are not allowed on loop6 [ 2317.809594][T12275] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01000007000000000000040000006b5d07c2b629fd53e9d6ac7cca9144111367aa1471009c76197010dd6cfeb84374b4308e650978b34b3549686e6d77e111fe14ba4b3e27a647db584f848ac009d16136389af9bbb70173f50ca0f66ddf7737c5d81709b5d250a77c20d8a7611b84"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000600)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) [ 2317.832899][T12281] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01000007000000000000040000006b5d07c2b629fd53e9d6ac7cca9144111367aa1471009c76197010dd6cfeb84374b4308e650978b34b3549686e6d77e111fe14ba4b3e27a647db584f848ac009d16136389af9bbb70173f50ca0f66ddf7737c5d81709b5d250a77c20d8a7611b84"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000600)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01000007000000000000040000006b5d07c2b629fd53e9d6ac7cca9144111367aa1471009c76197010dd6cfeb84374b4308e650978b34b3549686e6d77e111fe14ba4b3e27a647db584f848ac009d16136389af9bbb70173f50ca0f66ddf7737c5d81709b5d250a77c20d8a7611b84"], 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000600)) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) 17:26:33 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004831}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f00000001c0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x10}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6c8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd667}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x4010) 17:26:33 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c73484a01268e4a921d2ce0edf5d624525790e81c43970841e17e5c2426381278a092e273f3eb34a2f913536bb86e6b45af18b03c5c3d127a7e1f897ad97bc6696f120f79d42e67ce0f7bbb50661ff4b07cc9c324931c988d4c584f5d", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250f0000000800340005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 17:26:33 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="188000950000000000400000000000000000000000000000ba339d65a215cde31018e64787e7fb2f00"/52], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a82) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0xfffffffffffffffe, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000440)={r4, r3}) write$cgroup_int(r4, &(0x7f0000000200)=0x8, 0x12) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r7) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x1c}}, 0x40) r10 = syz_open_dev$vcsu(&(0x7f0000000240), 0x2, 0x2000) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="188000950000000000400000000000000000000000000000ba339d65a215cde31018e64787e7fb2f00"/52], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a82) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0xfffffffffffffffe, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000440)={r4, r3}) (async) write$cgroup_int(r4, &(0x7f0000000200)=0x8, 0x12) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r7) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x1c}}, 0x40) (async) syz_open_dev$vcsu(&(0x7f0000000240), 0x2, 0x2000) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r4) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) (async) [ 2317.862163][T12307] blktrace: Concurrent blktraces are not allowed on loop6 [ 2317.893514][T12310] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:33 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x3f, 0x80, 0x6, "5e63220c3abdcbae48f620875b2cc826ccc13c25cb1e20cc28607355b34c7f"}}}, 0x27) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01000007000000000000040000006b5d07c2b629fd53e9d6ac7cca9144111367aa1471009c76197010dd6cfeb84374b4308e650978b34b3549686e6d77e111fe14ba4b3e27a647db584f848ac009d16136389af9bbb70173f50ca0f66ddf7737c5d81709b5d250a77c20d8a7611b84"], 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000600)) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x487}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x10080) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r6 = getpid() getpgid(r6) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c833fa1e0a04bf516abe934a29ff7d7433fc8a81e38ccf9614e44591327b0e6", @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf251200000008000b0000000000050033000000000005002d000000000008003b00000000000600280004000000080032000300000008003b00b4613f7505002900010000000500330002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x487}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x10080) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r6 = getpid() getpgid(r6) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c833fa1e0a04bf516abe934a29ff7d7433fc8a81e38ccf9614e44591327b0e6", @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf251200000008000b0000000000050033000000000005002d000000000008003b00000000000600280004000000080032000300000008003b00b4613f7505002900010000000500330002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) [ 2317.949762][T12339] blktrace: Concurrent blktraces are not allowed on loop6 [ 2317.977791][T12349] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x487}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x10080) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r6 = getpid() getpgid(r6) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c833fa1e0a04bf516abe934a29ff7d7433fc8a81e38ccf9614e44591327b0e6", @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf251200000008000b0000000000050033000000000005002d000000000008003b00000000000600280004000000080032000300000008003b00b4613f7505002900010000000500330002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x487}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x10080) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r6) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c833fa1e0a04bf516abe934a29ff7d7433fc8a81e38ccf9614e44591327b0e6", @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf251200000008000b0000000000050033000000000005002d000000000008003b00000000000600280004000000080032000300000008003b00b4613f7505002900010000000500330002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) (async) 17:26:33 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004831}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f00000001c0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x10}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6c8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd667}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x4010) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x5555555555540604}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) [ 2318.001955][T12355] blktrace: Concurrent blktraces are not allowed on loop6 [ 2318.022197][T12360] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="188000950000000000400000000000000000000000000000ba339d65a215cde31018e64787e7fb2f00"/52], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a82) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0xfffffffffffffffe, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000440)={r4, r3}) (async) write$cgroup_int(r4, &(0x7f0000000200)=0x8, 0x12) (async) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r7) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x1c}}, 0x40) (async) r10 = syz_open_dev$vcsu(&(0x7f0000000240), 0x2, 0x2000) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r11, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) 17:26:33 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x3f, 0x80, 0x6, "5e63220c3abdcbae48f620875b2cc826ccc13c25cb1e20cc28607355b34c7f"}}}, 0x27) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:33 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 17:26:33 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (rerun: 64) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x5555555555540604}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r5 = getpid() getpgid(r5) (async, rerun: 32) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async, rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000000) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (rerun: 64) [ 2318.063193][T12379] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004831}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f00000001c0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x10}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6c8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd667}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x4010) 17:26:33 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 17:26:33 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x3f, 0x80, 0x6, "5e63220c3abdcbae48f620875b2cc826ccc13c25cb1e20cc28607355b34c7f"}}}, 0x27) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:33 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffffffffffe1, 0x189a02) 17:26:33 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x5555555555540604}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:33 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffffffffffe1, 0x189a02) 17:26:33 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) [ 2318.114209][T12393] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffffffffffe1, 0x189a02) 17:26:33 executing program 0: r0 = memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="94ca79ade251c3a5a4903be06dc18f4b3169d9168619deb24b6a0c342cc97e9b12b7c54a4d94964f2c182e67c8a3389dd0525d4559a1d4", @ANYRESOCT=r0], 0x9) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000fc5c00ed0a5cfb8999a9fa1b6c6c943626c32b07de997c7d77254ee01904cd5b68924aa3c6dffad9d999a252dc591a7ea9366e790558a9f508b1533cc5ed9dc2909c68c8b8a4978c4e367cddfd0e70436bec03ed1db625b87f6d2e9ffa1f97ebaca62aac159f658737e03dd31378abb82bdaa46daa2b65e11d6a9e88dfc436f5d6943eb75280ac6c026399e3869e7b530ab47a2f48ceb603db"], 0xfffffdef) 17:26:33 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x2c6ca3e8, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000700260000852000000400000094ffffffee0000002ccfb08e1a9965dbecae498b03b07a0a09548ebd247e06caf4a55dd839af41e888ee0409f61cbfc4025b05ea612567d3f2fb4c940cd29c4dd33303286868d9412351edfbd4b6658d7327a419c968ec9de4c9a0b4fbb27374c8b85599a921239912b3f84b0d9f44d77f72b85d44149cbe7ddca5bc69f7526a4fb5c423ec703d485ade7ffeab9c1f95b40e7d9c8c59ee7345c70ef39d6e7317ead4be00df74112794f98d60a23486e9ce442c000000000000000000000fc80e7e2b6d9d0c66d2e3db5c907fc3bcaa48aa386d584dbae4132b643c4768e4ee3f1c0aed45e9fe472b16689353f791c17b7e4ee71eddf8c68100ae72f3b7f5adef8ad1ec6b3f464ab241026e7820e351b2e5a13591fcf5fc0409ea97bbb5ec25cf8364"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x5, 0x4}, 0x10, r0, 0x0, 0x0, &(0x7f0000000280)}, 0x80) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x2}, 0x8) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x7, 0x4000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000340)=0x6, 0x4) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) r6 = getpid() getpgid(r6) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000540)={'\x00', 0x5, 0x1, 0x3, 0x401, 0x570, r6}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) 17:26:33 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9605, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x100}, 0xe) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x280400) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc9}}}, 0x6) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) 17:26:33 executing program 3: socketpair(0x11, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0xfffffffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0xdd}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000125bd7000fcdbdf25020000000a000900aaaaaaaaaabb000008000300", @ANYRES32=r4, @ANYBLOB="0500300000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004) socketpair(0xf, 0x5, 0xd3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000001c0)=0x8, 0x4) r6 = getpgid(0x0) syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/user\x00') [ 2318.172356][T12417] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 3: socketpair(0x11, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0xfffffffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0xdd}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000125bd7000fcdbdf25020000000a000900aaaaaaaaaabb000008000300", @ANYRES32=r4, @ANYBLOB="0500300000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004) socketpair(0xf, 0x5, 0xd3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000001c0)=0x8, 0x4) r6 = getpgid(0x0) syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/user\x00') socketpair(0x11, 0x5, 0x5, &(0x7f0000000040)) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0xfffffffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0xdd}}) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000125bd7000fcdbdf25020000000a000900aaaaaaaaaabb000008000300", @ANYRES32=r4, @ANYBLOB="0500300000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004) (async) socketpair(0xf, 0x5, 0xd3, &(0x7f0000000100)) (async) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000001c0)=0x8, 0x4) (async) getpgid(0x0) (async) syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/user\x00') (async) 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async, rerun: 32) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (rerun: 32) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async, rerun: 32) r5 = getpid() (rerun: 32) getpgid(r5) (async, rerun: 32) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (rerun: 32) r6 = getpid() getpgid(r6) (async, rerun: 32) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000540)={'\x00', 0x5, 0x1, 0x3, 0x401, 0x570, r6}) (async, rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) [ 2318.244554][T12435] blktrace: Concurrent blktraces are not allowed on loop6 [ 2318.257843][T12435] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:33 executing program 3: socketpair(0x11, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x40) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0xfffffffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0xdd}}) (rerun: 32) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000125bd7000fcdbdf25020000000a000900aaaaaaaaaabb000008000300", @ANYRES32=r4, @ANYBLOB="0500300000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004) socketpair(0xf, 0x5, 0xd3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000001c0)=0x8, 0x4) (async) r6 = getpgid(0x0) syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/user\x00') 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async, rerun: 32) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (rerun: 32) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async, rerun: 64) r6 = getpid() (rerun: 64) getpgid(r6) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000540)={'\x00', 0x5, 0x1, 0x3, 0x401, 0x570, r6}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) [ 2318.292027][T12454] blktrace: Concurrent blktraces are not allowed on loop6 [ 2318.299229][T12452] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x850) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r6 = getpid() getpgid(r6) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbf9, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004011) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:33 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) socketpair(0x2a, 0x80000, 0x9, &(0x7f0000000080)) syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x151a03) [ 2318.347260][T12464] blktrace: Concurrent blktraces are not allowed on loop6 17:26:33 executing program 0: r0 = memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="94ca79ade251c3a5a4903be06dc18f4b3169d9168619deb24b6a0c342cc97e9b12b7c54a4d94964f2c182e67c8a3389dd0525d4559a1d4", @ANYRESOCT=r0], 0x9) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000fc5c00ed0a5cfb8999a9fa1b6c6c943626c32b07de997c7d77254ee01904cd5b68924aa3c6dffad9d999a252dc591a7ea9366e790558a9f508b1533cc5ed9dc2909c68c8b8a4978c4e367cddfd0e70436bec03ed1db625b87f6d2e9ffa1f97ebaca62aac159f658737e03dd31378abb82bdaa46daa2b65e11d6a9e88dfc436f5d6943eb75280ac6c026399e3869e7b530ab47a2f48ceb603db"], 0xfffffdef) memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="94ca79ade251c3a5a4903be06dc18f4b3169d9168619deb24b6a0c342cc97e9b12b7c54a4d94964f2c182e67c8a3389dd0525d4559a1d4", @ANYRESOCT=r0], 0x9) (async) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000fc5c00ed0a5cfb8999a9fa1b6c6c943626c32b07de997c7d77254ee01904cd5b68924aa3c6dffad9d999a252dc591a7ea9366e790558a9f508b1533cc5ed9dc2909c68c8b8a4978c4e367cddfd0e70436bec03ed1db625b87f6d2e9ffa1f97ebaca62aac159f658737e03dd31378abb82bdaa46daa2b65e11d6a9e88dfc436f5d6943eb75280ac6c026399e3869e7b530ab47a2f48ceb603db"], 0xfffffdef) (async) 17:26:33 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x2c6ca3e8, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000700260000852000000400000094ffffffee0000002ccfb08e1a9965dbecae498b03b07a0a09548ebd247e06caf4a55dd839af41e888ee0409f61cbfc4025b05ea612567d3f2fb4c940cd29c4dd33303286868d9412351edfbd4b6658d7327a419c968ec9de4c9a0b4fbb27374c8b85599a921239912b3f84b0d9f44d77f72b85d44149cbe7ddca5bc69f7526a4fb5c423ec703d485ade7ffeab9c1f95b40e7d9c8c59ee7345c70ef39d6e7317ead4be00df74112794f98d60a23486e9ce442c000000000000000000000fc80e7e2b6d9d0c66d2e3db5c907fc3bcaa48aa386d584dbae4132b643c4768e4ee3f1c0aed45e9fe472b16689353f791c17b7e4ee71eddf8c68100ae72f3b7f5adef8ad1ec6b3f464ab241026e7820e351b2e5a13591fcf5fc0409ea97bbb5ec25cf8364"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x5, 0x4}, 0x10, r0, 0x0, 0x0, &(0x7f0000000280)}, 0x80) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x2}, 0x8) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x7, 0x4000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000340)=0x6, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x2c6ca3e8}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x5, 0x4}, 0x10, r0, 0x0, 0x0, &(0x7f0000000280)}, 0x80) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x2}, 0x8) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000280), 0x7, 0x4000) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000340)=0x6, 0x4) (async) 17:26:33 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9605, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x100}, 0xe) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x280400) (rerun: 64) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc9}}}, 0x6) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) 17:26:33 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) socketpair(0x2a, 0x80000, 0x9, &(0x7f0000000080)) syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x151a03) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) (async) socketpair(0x2a, 0x80000, 0x9, &(0x7f0000000080)) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x151a03) (async) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x850) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r6 = getpid() getpgid(r6) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbf9, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004011) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x850) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r6) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbf9, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004011) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) 17:26:34 executing program 3: r0 = socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) socketpair(0x2a, 0x80000, 0x9, &(0x7f0000000080)) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x151a03) 17:26:34 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x101000) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x5, 0x14}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0xb4ce, 0x1, 0x7, 0x105, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xaf, &(0x7f0000000140)=""/175, 0x385a0524d5ec9db2, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x7fffffff, 0x6}, 0x10, 0x1b952, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, 0x1, 0x1, r2]}, 0x80) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) [ 2318.425783][T12471] blktrace: Concurrent blktraces are not allowed on loop6 [ 2318.463810][T12489] blktrace: Concurrent blktraces are not allowed on loop6 17:26:34 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x850) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r6 = getpid() getpgid(r6) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbf9, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004011) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x850) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r6) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbf9, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004011) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x80000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7, 0x7ff, 0x3, 0x23738000, 0x5c9, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) 17:26:34 executing program 0: r0 = memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="94ca79ade251c3a5a4903be06dc18f4b3169d9168619deb24b6a0c342cc97e9b12b7c54a4d94964f2c182e67c8a3389dd0525d4559a1d4", @ANYRESOCT=r0], 0x9) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000fc5c00ed0a5cfb8999a9fa1b6c6c943626c32b07de997c7d77254ee01904cd5b68924aa3c6dffad9d999a252dc591a7ea9366e790558a9f508b1533cc5ed9dc2909c68c8b8a4978c4e367cddfd0e70436bec03ed1db625b87f6d2e9ffa1f97ebaca62aac159f658737e03dd31378abb82bdaa46daa2b65e11d6a9e88dfc436f5d6943eb75280ac6c026399e3869e7b530ab47a2f48ceb603db"], 0xfffffdef) [ 2318.521545][T12519] blktrace: Concurrent blktraces are not allowed on loop6 17:26:34 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x2c6ca3e8, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000700260000852000000400000094ffffffee0000002ccfb08e1a9965dbecae498b03b07a0a09548ebd247e06caf4a55dd839af41e888ee0409f61cbfc4025b05ea612567d3f2fb4c940cd29c4dd33303286868d9412351edfbd4b6658d7327a419c968ec9de4c9a0b4fbb27374c8b85599a921239912b3f84b0d9f44d77f72b85d44149cbe7ddca5bc69f7526a4fb5c423ec703d485ade7ffeab9c1f95b40e7d9c8c59ee7345c70ef39d6e7317ead4be00df74112794f98d60a23486e9ce442c000000000000000000000fc80e7e2b6d9d0c66d2e3db5c907fc3bcaa48aa386d584dbae4132b643c4768e4ee3f1c0aed45e9fe472b16689353f791c17b7e4ee71eddf8c68100ae72f3b7f5adef8ad1ec6b3f464ab241026e7820e351b2e5a13591fcf5fc0409ea97bbb5ec25cf8364"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x5, 0x4}, 0x10, r0, 0x0, 0x0, &(0x7f0000000280)}, 0x80) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x2}, 0x8) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x7, 0x4000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000340)=0x6, 0x4) 17:26:34 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x101000) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x5, 0x14}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0xb4ce, 0x1, 0x7, 0x105, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xaf, &(0x7f0000000140)=""/175, 0x385a0524d5ec9db2, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x7fffffff, 0x6}, 0x10, 0x1b952, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, 0x1, 0x1, r2]}, 0x80) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) 17:26:34 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9605, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x100}, 0xe) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x280400) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc9}}}, 0x6) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9605, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x100}, 0xe) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x280400) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc9}}}, 0x6) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) (async) 17:26:34 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400000000000, 0x62800) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:34 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400000000000, 0x62800) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x400000000000, 0x62800) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x80000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7, 0x7ff, 0x3, 0x23738000, 0x5c9, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) [ 2318.566119][T12544] blktrace: Concurrent blktraces are not allowed on loop6 [ 2318.585828][T12544] blktrace: Concurrent blktraces are not allowed on loop4 17:26:34 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400000000000, 0x62800) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x400000000000, 0x62800) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:34 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)={0x1, @set_cpb={{0x441, 0xb}, {0x1, 0x96, 0x7f, 0x0, 0x6, 0x9, 0x1}}}, 0xf) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406aa09aaaaaa00fb71f46d5072927695556cb93ba708be23fa255cbb1b93b863cfa231420eafb6d594831d6674e97e63af5510a84ab1ebc5a4f31f6cc11cb8bc0a"], 0xfffffdef) [ 2318.618508][T12562] blktrace: Concurrent blktraces are not allowed on loop6 [ 2318.630615][T12562] blktrace: Concurrent blktraces are not allowed on loop4 17:26:34 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x6) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x80000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7, 0x7ff, 0x3, 0x23738000, 0x5c9, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x80000) (async) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7, 0x7ff, 0x3, 0x23738000, 0x5c9, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r7) (async) 17:26:34 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x81, 0x4) 17:26:34 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000093070000000000000600000018bc47e882b4a1f73f435961000010000000000000007fffffff85100000f8ffffff1849000000000000000000000000070000000000000000000000000005000000850000004100"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x93, 0x4}, 0x10, 0x3028f}, 0x80) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x2, &(0x7f0000000180)=@raw=[@generic={0x20, 0x4, 0x5, 0x100, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000001c0)='GPL\x00', 0x6000, 0x88, &(0x7f0000000280)=""/136, 0x0, 0x1, '\x00', 0x0, 0x1d, r0, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x8000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r1]}, 0x80) syz_open_dev$vcsu(&(0x7f0000000000), 0x8000000000000001, 0x48a02) 17:26:34 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x101000) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x5, 0x14}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0xb4ce, 0x1, 0x7, 0x105, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xaf, &(0x7f0000000140)=""/175, 0x385a0524d5ec9db2, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x7fffffff, 0x6}, 0x10, 0x1b952, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, 0x1, 0x1, r2]}, 0x80) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x101000) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x5, 0x14}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0xb4ce, 0x1, 0x7, 0x105, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xaf, &(0x7f0000000140)=""/175, 0x385a0524d5ec9db2, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x7fffffff, 0x6}, 0x10, 0x1b952, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, 0x1, 0x1, r2]}, 0x80) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x88c0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:34 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000093070000000000000600000018bc47e882b4a1f73f435961000010000000000000007fffffff85100000f8ffffff1849000000000000000000000000070000000000000000000000000005000000850000004100"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x93, 0x4}, 0x10, 0x3028f}, 0x80) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x2, &(0x7f0000000180)=@raw=[@generic={0x20, 0x4, 0x5, 0x100, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000001c0)='GPL\x00', 0x6000, 0x88, &(0x7f0000000280)=""/136, 0x0, 0x1, '\x00', 0x0, 0x1d, r0, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x8000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r1]}, 0x80) syz_open_dev$vcsu(&(0x7f0000000000), 0x8000000000000001, 0x48a02) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000093070000000000000600000018bc47e882b4a1f73f435961000010000000000000007fffffff85100000f8ffffff1849000000000000000000000000070000000000000000000000000005000000850000004100"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x93, 0x4}, 0x10, 0x3028f}, 0x80) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x2, &(0x7f0000000180)=@raw=[@generic={0x20, 0x4, 0x5, 0x100, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000001c0)='GPL\x00', 0x6000, 0x88, &(0x7f0000000280)=""/136, 0x0, 0x1, '\x00', 0x0, 0x1d, r0, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x8000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r1]}, 0x80) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x8000000000000001, 0x48a02) (async) [ 2318.691889][T12585] blktrace: Concurrent blktraces are not allowed on loop6 [ 2318.699246][T12585] blktrace: Concurrent blktraces are not allowed on loop4 17:26:34 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000093070000000000000600000018bc47e882b4a1f73f435961000010000000000000007fffffff85100000f8ffffff1849000000000000000000000000070000000000000000000000000005000000850000004100"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x93, 0x4}, 0x10, 0x3028f}, 0x80) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x2, &(0x7f0000000180)=@raw=[@generic={0x20, 0x4, 0x5, 0x100, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000001c0)='GPL\x00', 0x6000, 0x88, &(0x7f0000000280)=""/136, 0x0, 0x1, '\x00', 0x0, 0x1d, r0, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x8000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r1]}, 0x80) syz_open_dev$vcsu(&(0x7f0000000000), 0x8000000000000001, 0x48a02) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000093070000000000000600000018bc47e882b4a1f73f435961000010000000000000007fffffff85100000f8ffffff1849000000000000000000000000070000000000000000000000000005000000850000004100"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x93, 0x4}, 0x10, 0x3028f}, 0x80) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x2, &(0x7f0000000180)=@raw=[@generic={0x20, 0x4, 0x5, 0x100, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000001c0)='GPL\x00', 0x6000, 0x88, &(0x7f0000000280)=""/136, 0x0, 0x1, '\x00', 0x0, 0x1d, r0, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x8000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r1]}, 0x80) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x8000000000000001, 0x48a02) (async) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x88c0) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:34 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) socketpair(0x10, 0x800, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x700, 0x10, 0x100, 0x1, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x67, 0x0, 0x7e, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0x1b, 0x0, [{0x7, 0xc, "5e4424e0e5a06ce4ad27"}, {0x6, 0x9, "05ac57a978d7f8"}]}, @timestamp_prespec={0x44, 0x4c, 0x27, 0x3, 0x3, [{@multicast1, 0x6}, {@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x7fffffff}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x1}, {@empty, 0x6e0}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x5de3}, {@multicast1, 0x3}]}, @noop]}}}}}) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (rerun: 64) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x88c0) (async, rerun: 64) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (rerun: 64) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async, rerun: 64) r5 = getpid() (rerun: 64) getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async, rerun: 64) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) [ 2318.758490][T12611] blktrace: Concurrent blktraces are not allowed on loop6 [ 2318.793466][T12630] blktrace: Concurrent blktraces are not allowed on loop6 17:26:34 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)={0x1, @set_cpb={{0x441, 0xb}, {0x1, 0x96, 0x7f, 0x0, 0x6, 0x9, 0x1}}}, 0xf) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406aa09aaaaaa00fb71f46d5072927695556cb93ba708be23fa255cbb1b93b863cfa231420eafb6d594831d6674e97e63af5510a84ab1ebc5a4f31f6cc11cb8bc0a"], 0xfffffdef) [ 2318.826752][T12642] blktrace: Concurrent blktraces are not allowed on loop6 [ 2318.834010][T12642] blktrace: Concurrent blktraces are not allowed on loop6 17:26:34 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x6) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000006900000000"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedb2274ec3bc6b6d34c6c4a12000000070006000000000000000000", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xfc}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6ddc}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r8, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ac}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x48c0}, 0x24000000) 17:26:34 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x81, 0x4) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x81, 0x4) (async) 17:26:34 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) socketpair(0x10, 0x800, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x700, 0x10, 0x100, 0x1, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x67, 0x0, 0x7e, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0x1b, 0x0, [{0x7, 0xc, "5e4424e0e5a06ce4ad27"}, {0x6, 0x9, "05ac57a978d7f8"}]}, @timestamp_prespec={0x44, 0x4c, 0x27, 0x3, 0x3, [{@multicast1, 0x6}, {@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x7fffffff}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x1}, {@empty, 0x6e0}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x5de3}, {@multicast1, 0x3}]}, @noop]}}}}}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) socketpair(0x10, 0x800, 0x6, &(0x7f0000000040)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x700, 0x10, 0x100, 0x1, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x67, 0x0, 0x7e, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0x1b, 0x0, [{0x7, 0xc, "5e4424e0e5a06ce4ad27"}, {0x6, 0x9, "05ac57a978d7f8"}]}, @timestamp_prespec={0x44, 0x4c, 0x27, 0x3, 0x3, [{@multicast1, 0x6}, {@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x7fffffff}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x1}, {@empty, 0x6e0}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x5de3}, {@multicast1, 0x3}]}, @noop]}}}}}) (async) 17:26:34 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x0) 17:26:34 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x0) 17:26:34 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x0) syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x0) (async) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000006900000000"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedb2274ec3bc6b6d34c6c4a12000000070006000000000000000000", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xfc}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6ddc}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r8, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ac}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x48c0}, 0x24000000) 17:26:34 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socket$kcm(0x29, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) getpeername$unix(r0, &(0x7f0000000140), &(0x7f0000000080)=0x6e) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000006900000000"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fedb2274ec3bc6b6d34c6c4a12000000070006000000000000000000", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xfc}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6ddc}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async, rerun: 32) r9 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r8, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ac}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x48c0}, 0x24000000) [ 2318.913377][T12652] blktrace: Concurrent blktraces are not allowed on loop6 [ 2318.950452][T12665] blktrace: Concurrent blktraces are not allowed on loop6 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xa, 0x7, 0x4000dd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000851}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000fedb00000080000000003b00c51200400800390000000000080039000104000008003100ff7f0000050037000100000008000b0003000000060028000200000008003a0001000000"], 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20002041) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:34 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)={0x1, @set_cpb={{0x441, 0xb}, {0x1, 0x96, 0x7f, 0x0, 0x6, 0x9, 0x1}}}, 0xf) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406aa09aaaaaa00fb71f46d5072927695556cb93ba708be23fa255cbb1b93b863cfa231420eafb6d594831d6674e97e63af5510a84ab1ebc5a4f31f6cc11cb8bc0a"], 0xfffffdef) 17:26:34 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x6) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xa, 0x7, 0x4000dd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000851}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000fedb00000080000000003b00c51200400800390000000000080039000104000008003100ff7f0000050037000100000008000b0003000000060028000200000008003a0001000000"], 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20002041) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xa, 0x7, 0x4000dd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000851}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000fedb00000080000000003b00c51200400800390000000000080039000104000008003100ff7f0000050037000100000008000b0003000000060028000200000008003a0001000000"], 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20002041) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) (async) [ 2318.977898][T12679] blktrace: Concurrent blktraces are not allowed on loop6 [ 2319.002746][T12685] blktrace: Concurrent blktraces are not allowed on loop6 17:26:34 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x81, 0x4) 17:26:34 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) socketpair(0x10, 0x800, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x700, 0x10, 0x100, 0x1, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x67, 0x0, 0x7e, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0x1b, 0x0, [{0x7, 0xc, "5e4424e0e5a06ce4ad27"}, {0x6, 0x9, "05ac57a978d7f8"}]}, @timestamp_prespec={0x44, 0x4c, 0x27, 0x3, 0x3, [{@multicast1, 0x6}, {@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x7fffffff}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x1}, {@empty, 0x6e0}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x5de3}, {@multicast1, 0x3}]}, @noop]}}}}}) 17:26:34 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socket$kcm(0x29, 0x0, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) getpeername$unix(r0, &(0x7f0000000140), &(0x7f0000000080)=0x6e) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xa, 0x7, 0x4000dd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000851}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000fedb00000080000000003b00c51200400800390000000000080039000104000008003100ff7f0000050037000100000008000b0003000000060028000200000008003a0001000000"], 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20002041) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) [ 2319.052166][T12691] blktrace: Concurrent blktraces are not allowed on loop6 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000011000104000200"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080045651ca07d9089f51200000008000600", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) syz_open_dev$vcsu(&(0x7f0000000240), 0x6846068e, 0x181082) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000540)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000011000104000200"], 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080045651ca07d9089f51200000008000600", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) syz_open_dev$vcsu(&(0x7f0000000240), 0x6846068e, 0x181082) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000540)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) [ 2319.096773][T12723] blktrace: Concurrent blktraces are not allowed on loop6 [ 2319.122760][T12730] blktrace: Concurrent blktraces are not allowed on loop6 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000011000104000200"], 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080045651ca07d9089f51200000008000600", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) syz_open_dev$vcsu(&(0x7f0000000240), 0x6846068e, 0x181082) (async) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) (async) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000540)={r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) [ 2319.143437][T12734] blktrace: Concurrent blktraces are not allowed on loop6 17:26:34 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="012a6250819c14050000f264a34e00"], 0x9) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa0050f3bace18a2e2de858912bf214e2f06e77403b5741fd3dbc52027573e8cc4196b26600e7b7441c7bb613ba868174f3b64d3a06d5b4231aee782880e7f325dcf1e688727540eb4a669cee65ea58d7b61e4"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="04000000d57d5d5909ff83202661e18dc7d480d12d6176688f7c705b9a8d7ba4f66eda2ef2176be1c53ccbda752c", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000005002e000100000005002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r4 = getpid() getpgid(r4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f00000005c0)}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) 17:26:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x80, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0157a85b3efa4eaaaa10"], 0xfffffdef) 17:26:34 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 17:26:34 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) accept$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1401, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4002005}, 0x40000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:34 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socket$kcm(0x29, 0x0, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) getpeername$unix(r0, &(0x7f0000000140), &(0x7f0000000080)=0x6e) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="04000000d57d5d5909ff83202661e18dc7d480d12d6176688f7c705b9a8d7ba4f66eda2ef2176be1c53ccbda752c", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000005002e000100000005002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r4 = getpid() getpgid(r4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f00000005c0)}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="04000000d57d5d5909ff83202661e18dc7d480d12d6176688f7c705b9a8d7ba4f66eda2ef2176be1c53ccbda752c", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000005002e000100000005002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r4) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f00000005c0)}, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) (async) [ 2319.171952][T12739] blktrace: Concurrent blktraces are not allowed on loop6 [ 2319.196601][T12746] blktrace: Concurrent blktraces are not allowed on loop6 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="04000000d57d5d5909ff83202661e18dc7d480d12d6176688f7c705b9a8d7ba4f66eda2ef2176be1c53ccbda752c", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000005002e000100000005002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r4 = getpid() getpgid(r4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f00000005c0)}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="04000000d57d5d5909ff83202661e18dc7d480d12d6176688f7c705b9a8d7ba4f66eda2ef2176be1c53ccbda752c", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000005002e000100000005002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) (async) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) getpid() (async) getpgid(r4) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r4}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) (async) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f00000005c0)}, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) (async) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="00000000f9c5e9a85bbd9dd80fa3f699f84fa3fe7216ab62ac9077d879d79f15c56f69e283a8dbc5b0e9c5f4dcb61a5bc9938fbd75f056ee29d0d234fd73e4156144b40d3e7cddcd54959e3efef00b6e33f443fe1ac248eaf99c7aa5a707823ff4df5c33fe0714f173c8e8d127b14b5c1083cf1e938679b5e56eefe7b36f469dc4839fd19c4ddf4adabfdc0292cd5e88190e58353b651134cb244922bb148a86b86714724c446365f3584663b1025bddcec5eb888ff8c9615be5a5470173eb3c6bfdb01507bd4ff97c9cc17b8f154d8a2dd36cf7a0acbd8ec39121cbe0ab0ad5ebc84c955791c0c3e1b16f2e155a952096ccefbc81e4cf6989a28894e41a9a08385ed93da10f87a2bd69b1ebedfaa46d5751d3883ea7d84b0a8e9d7bbfc9ef2603837c521ec65ebfe30017969383038d333be6ae", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:34 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="012a6250819c14050000f264a34e00"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa0050f3bace18a2e2de858912bf214e2f06e77403b5741fd3dbc52027573e8cc4196b26600e7b7441c7bb613ba868174f3b64d3a06d5b4231aee782880e7f325dcf1e688727540eb4a669cee65ea58d7b61e4"], 0xfffffdef) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) 17:26:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x80, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0157a85b3efa4eaaaa10"], 0xfffffdef) 17:26:34 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) accept$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1401, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4002005}, 0x40000) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:34 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="012a6250819c14050000f264a34e00"], 0x9) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa0050f3bace18a2e2de858912bf214e2f06e77403b5741fd3dbc52027573e8cc4196b26600e7b7441c7bb613ba868174f3b64d3a06d5b4231aee782880e7f325dcf1e688727540eb4a669cee65ea58d7b61e4"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="012a6250819c14050000f264a34e00"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa0050f3bace18a2e2de858912bf214e2f06e77403b5741fd3dbc52027573e8cc4196b26600e7b7441c7bb613ba868174f3b64d3a06d5b4231aee782880e7f325dcf1e688727540eb4a669cee65ea58d7b61e4"], 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) 17:26:34 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 17:26:34 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x100000, 0x109a02) 17:26:34 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) accept$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1401, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4002005}, 0x40000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) accept$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1401, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4002005}, 0x40000) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) 17:26:34 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x100000, 0x109a02) 17:26:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x8, 0x3f}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="08002bbd7000fedbdf251200000008000600", @ANYRES32=r3, @ANYBLOB="05002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x42) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xdd05, 0x8, 0x6}) (async) r5 = getpid() getpgid(r5) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x753f61b4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2040051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0xffff, 0x9951, 0x4, 0x40, r5}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) [ 2319.370893][T12794] blktrace: Concurrent blktraces are not allowed on loop6 17:26:35 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x100000, 0x109a02) 17:26:35 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x1ff, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r1, 0x50a, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008025}, 0x8090) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) 17:26:35 executing program 4: r0 = memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="94ca79ade251c3a5a4903be06dc18f4b3169d9168619deb24b6a0c342cc97e9b12b7c54a4d94964f2c182e67c8a3389dd0525d4559a1d4", @ANYRESOCT=r0], 0x9) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000fc5c00ed0a5cfb8999a9fa1b6c6c943626c32b07de997c7d77254ee01904cd5b68924aa3c6dffad9d999a252dc591a7ea9366e790558a9f508b1533cc5ed9dc2909c68c8b8a4978c4e367cddfd0e70436bec03ed1db625b87f6d2e9ffa1f97ebaca62aac159f658737e03dd31378abb82bdaa46daa2b65e11d6a9e88dfc436f5d6943eb75280ac6c026399e3869e7b530ab47a2f48ceb603db"], 0xfffffdef) [ 2319.435628][T12818] blktrace: Concurrent blktraces are not allowed on loop6 17:26:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x80, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0157a85b3efa4eaaaa10"], 0xfffffdef) 17:26:35 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040051}, 0x810) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) 17:26:35 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x1ff, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r1, 0x50a, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008025}, 0x8090) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x1ff, 0x4) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r1, 0x50a, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008025}, 0x8090) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) 17:26:35 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010a140500000000009cef60ecf44b8eb4ccefcdab9b73c8416169eafcea85b96828b82d70d33e174f8e394cc5be2768a7107be047ced4b99e7691c9c22934eb4989182fb2f86997156c8261a78efa7124eee1c96043c83d38188f1b6bd5e6fef7c84d6e054995e4139954e0945c0922ddfff76f3e69f02366257b967c1be3ecd589b0f4255583d6941a948e94f708e9f5a132fb990ebab8560b35a7a9dcf90b309085a89261f3f8efcebce452d20437940a803ea84f267e59bac34a4d272579335cf9608671a7fc30f3cbef596a11ffddd602bca498305e2a435275924e56cdf9e6e585ac03eee0771514d831d6"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4c7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004810) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0xe38cb957e1f7894f, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x814}, 0x8800) 17:26:35 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 17:26:35 executing program 4: r0 = memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="94ca79ade251c3a5a4903be06dc18f4b3169d9168619deb24b6a0c342cc97e9b12b7c54a4d94964f2c182e67c8a3389dd0525d4559a1d4", @ANYRESOCT=r0], 0x9) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000fc5c00ed0a5cfb8999a9fa1b6c6c943626c32b07de997c7d77254ee01904cd5b68924aa3c6dffad9d999a252dc591a7ea9366e790558a9f508b1533cc5ed9dc2909c68c8b8a4978c4e367cddfd0e70436bec03ed1db625b87f6d2e9ffa1f97ebaca62aac159f658737e03dd31378abb82bdaa46daa2b65e11d6a9e88dfc436f5d6943eb75280ac6c026399e3869e7b530ab47a2f48ceb603db"], 0xfffffdef) 17:26:35 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:35 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x1ff, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r1, 0x50a, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008025}, 0x8090) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x1ff, 0x4) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r1, 0x50a, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008025}, 0x8090) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) 17:26:35 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010a140500000000009cef60ecf44b8eb4ccefcdab9b73c8416169eafcea85b96828b82d70d33e174f8e394cc5be2768a7107be047ced4b99e7691c9c22934eb4989182fb2f86997156c8261a78efa7124eee1c96043c83d38188f1b6bd5e6fef7c84d6e054995e4139954e0945c0922ddfff76f3e69f02366257b967c1be3ecd589b0f4255583d6941a948e94f708e9f5a132fb990ebab8560b35a7a9dcf90b309085a89261f3f8efcebce452d20437940a803ea84f267e59bac34a4d272579335cf9608671a7fc30f3cbef596a11ffddd602bca498305e2a435275924e56cdf9e6e585ac03eee0771514d831d6"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4c7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004810) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async, rerun: 64) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0xe38cb957e1f7894f, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x814}, 0x8800) 17:26:35 executing program 4: r0 = memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="94ca79ade251c3a5a4903be06dc18f4b3169d9168619deb24b6a0c342cc97e9b12b7c54a4d94964f2c182e67c8a3389dd0525d4559a1d4", @ANYRESOCT=r0], 0x9) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000fc5c00ed0a5cfb8999a9fa1b6c6c943626c32b07de997c7d77254ee01904cd5b68924aa3c6dffad9d999a252dc591a7ea9366e790558a9f508b1533cc5ed9dc2909c68c8b8a4978c4e367cddfd0e70436bec03ed1db625b87f6d2e9ffa1f97ebaca62aac159f658737e03dd31378abb82bdaa46daa2b65e11d6a9e88dfc436f5d6943eb75280ac6c026399e3869e7b530ab47a2f48ceb603db"], 0xfffffdef) 17:26:35 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6) 17:26:35 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040051}, 0x810) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040051}, 0x810) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) (async) 17:26:35 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r1, &(0x7f0000001540)={&(0x7f0000000040)={0x2a, 0x1, 0x4001}, 0xc, &(0x7f0000001300)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000000080)="e90504bc5bf84f7165e37967ed962a6f7b2ba6ad05937055bb4e272c59f43b8a7d02aa37de38fc358cf4475ba2817998b285430b57b642a0c8f3d3d3ba5e60bfbef15b85f4c2ffa5cf57b428b8f17ad79b93311b7aaa89970e7ce6d39eb1ce2ae34ea14271c9067cf42f827496732b004f53828aba", 0x75}, {&(0x7f0000001140)="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", 0xfa}, {&(0x7f0000001240)="6e0e1be8017ea5d5c0fa3063e801551846ae4c4436710fcd5eea66a97319b79b8fdc08124e90d232336650e2c80d1d721dde4d39d824f52bf6efad70f90f3a3b573ca938a49efafb", 0x48}, {&(0x7f00000012c0)="1544f97bb7d3b104269347bdba7f708b04e510988d474a2b3c4666b7c37b9499315f33b51d67a01e393b52f5a7b51b3e05", 0x31}], 0x5, &(0x7f0000001380)=[{0xa8, 0x103, 0x6, "c1caca25736de26b6ecbd1a5c5859df97fb040a9b548eb1440fabdcd0e8b9808f4c070c72621fc78b1dcb632a1b82459747f67bcf3e1baba1cd2fe50d2bd796856d354c7f7f876f056ad144ca4c82bf113535298153656f250511b9a5549fa45ac6e09fad1662feac4050a4c7ff6930f0fcc33c8c837ad19c5f3a0f619241fe4f94c23af147e2745a39b0f305d21264f58ac"}, {0x28, 0x102, 0x3, "092c6d2d1da95804f90e799a35ac5fc67749c3ac0b01e4"}, {0xb8, 0x10e, 0xff, "fa20d2fb123b810341d430d9bb18356d268e4e8497ceb464edcd4509db576b878245800d445509576b7f4595f6fd7fe85079ebac1539692ea1894acdf81c26cf862e76791320d30341fedb3c69adea7b0e0328807522cfc211e9cb8fe03b6c4ce64ffb711c7439bc3642832b2221e66be0639fb10a398bcb374018e638c09f3aa6714347cecb849d5600c53231f3d76d7ca53f27f749e4aee669bcb139f46aa3e7331a2df685"}], 0x188, 0x4004011}, 0x38) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x3c, 0x4) 17:26:35 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6) 17:26:35 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040051}, 0x810) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) 17:26:35 executing program 4: r0 = memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="94ca79ade251c3a5a4903be06dc18f4b3169d9168619deb24b6a0c342cc97e9b12b7c54a4d94964f2c182e67c8a3389dd0525d4559a1d4", @ANYRESOCT=r0], 0x9) 17:26:35 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010a140500000000009cef60ecf44b8eb4ccefcdab9b73c8416169eafcea85b96828b82d70d33e174f8e394cc5be2768a7107be047ced4b99e7691c9c22934eb4989182fb2f86997156c8261a78efa7124eee1c96043c83d38188f1b6bd5e6fef7c84d6e054995e4139954e0945c0922ddfff76f3e69f02366257b967c1be3ecd589b0f4255583d6941a948e94f708e9f5a132fb990ebab8560b35a7a9dcf90b309085a89261f3f8efcebce452d20437940a803ea84f267e59bac34a4d272579335cf9608671a7fc30f3cbef596a11ffddd602bca498305e2a435275924e56cdf9e6e585ac03eee0771514d831d6"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4c7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004810) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0xe38cb957e1f7894f, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x814}, 0x8800) 17:26:35 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) (async) 17:26:35 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r1, &(0x7f0000001540)={&(0x7f0000000040)={0x2a, 0x1, 0x4001}, 0xc, &(0x7f0000001300)=[{&(0x7f0000000140)="8e3e9765e1ef08ce2e09cac140e3acf9c088a708b28e984831c2f7185a82a7e8f4fe6d98a99404309fa876815977150cd9b8eb7e2de28cfc3db08095033d06b09d0c3aabb45107ccec5c5cb9ca231337dec9f73dc64bc367d74d607a8ad63e8295f1e11f267dd92a16f6549d5c11cc2a6e00fad2fb1789c0a060eb687e3943e98828c10a2639eccdf041a73582c3a580ea4980b5bb64eea170a7af901b7e21076f7d40a95781d7529a171cfab98d97b66f99803641eb2c54569e9c17819bb96332f18661ecba0783058433fc4813542bb50535b5f1ec914a9fdac27f670ea5d525557f961e62fe0db3248a281a968f35b894c7e89b188fa28e0ae16695de8776186d875e11b419c5ceeaa0023c5d3594fd6671c57d2daa1e1f40b5bb3bcc800f4fb66af8cd04895a6fcef54c743be07a6de94b07f65d60d6c7f988c1147a369e1755b1bba6c9a0b34c8e66853b7c22b7e21d9d5894cb25a3fa277d5a1fa8d4ec3eb370bf845a7acda5c06cf1d22ca01dcc65562220323c80da8e6875880cdd17c507fdb788dd6b60620ce9f228e210f8a1ecbcf6d7dc542fc8fda389a1af1cce1f76aa60c9d4c84c49ec19a861e69925ed24f933ec820f65f5ddc491b0a9f173f74a946973e890a62186ad0d1812c97070f4424534d3967737093b8641713da7354f49e40f205dca03a86efa00bf6474ec217df8c51a93d67a7f273e9a34b9239c04872e70e9844f9c385b3c618e48143119c5a84b10868c4c0e03ef5537122dddffb4aacb74b9d8c5f7e3f831672baf014173f681e129d9bb12af6f2e3ad53e349c6fc226a8a89cdc8f9811333dca0bc3dc452ff651a88a5ca0e8e3238accb0f579827e479c9954acc4e9be3ecba29475e5bb224e1ca3ac909dd9c7747a15941b39fdffb72463db295010c2ed9d18b7d0b0862b9914daa811e2a2ed302f92ae04db977048dea8418b24b76eadb5e7fb9717b370ac8c3ca09aa967a47f9f682e17cf4420b0c6ad265c4a7b21a37cd36074f21d8f80fda931060cef2b475cfb519832ff697e20a086b8df3ebd49e7f128f1b6040448fec2cd72b2398a7921c6d3f12ccad5799d6d2eee977ae1cb31eb29bd1c3bc9199c3ddaed394fdcd71bf27b06b77bb26353938b10800b4b03a962c83313b4a6975cbe58b388764a06d73c500480d8925980efdcfd463bca06be6f8dd3fb840adab54b36a7bdf62df0bab4e3794b3a57e310167674fda32440581fca16673f00acf2bbb9956280258abedbf24adfdd8927d777137b85ea4e0354f4827d6741f35c17fb2ad4b212243c233b2f0c816c2df43ac826377768dd6952e674cba2342b3b6e82a268097fd61781a126ae07d637cb265ae261079b39d01fbd35936ef26452ec4787b4c5bf042e8194986772a9a56dec5e0b3df0fe170e57559d3d5429d645d34f68845c69e06d65b5109e9b17cdd9114b0bba8c5b9a701347b4f8eb5fb7588903630bb3292b8abda5e2735186afb1a9425e619b4667eea18c637049fcaf85f9cacb954b064dbc405198187cf7c4c6f427c2012183760a6a4c297282799dacec576a5c2584d5febfe20c925b29f5f35e05e76e03fa57bc39cfe5fc3ff38667699c638578edf85c5386fdc9cb120a7465ca80b0785ab28cb66ddd33bed65f6b50b133252af41888d893281fec29689c05b4d8b96cc34562072eff0c52b0627f9dc425c71f5a8b683603dbee4e217cc8d5c22e6752c7bea2b915170b6a2a25546ed3ea7f3ace0fb3e5b3d96f916da989b5c771d8c487aca146386449ee9d43ba47946feddfdd2e47a0055979d5c571b5ed14db8d3bca169554614d27510cc35a15b1e5b52130da3ad8415f843c0b107d05af60ad87d4cca85e1d19d591e107ac5ada496b50c78dc4eaf324956fb27bd0268082aad3094f34ae68434e1d8040c389c199743aabfd98d13e3e553d57f23b191a4502d6064f07e9e99f28cd2442913139f320bddfd173aeb4d59c78f156d9fbf5ace391c3f0a1be1bb9107d72a96732be7e0927c36189c907725e0b502fdf5a2cae7961f5fbd7f8666724a3f7031de73c5c95af9ab40017eba84a47a99373961439226a449be488001a432d4ecd6e838e5791e777527c7dab60f6e9f351fccc814e706988d264a8683140b184cac084df9b23eae9c4cfdd7645e5b51b927d826ecce656bd47812d15d1fbad0101df37907de40d11e197377a1054fe89d7eab4f713ed515b01f9f70ed5cd76a05dfcc58c63256c8b024d3cf7858c7f364ef30a6618396968d5e519883079bf46f74f1f8f04de13b476b5e9be06de65eb5a510e947c26cfd51b10df863629b5f4af7c3e7c26f82b01910caccc5df1af7cd6ecd4909a8e6725ce73ff11251e99287750a3c78af8e9de8030f35734350842399d8ef4bf9f8d9ecdcbd5f279f4d7a9fd1c36c589d4fd36f3bbb904f9c24d99eb6223ceaa5f8f0756edcffce8e73ecd11fd0ff99ab11062a1ee6a85c9e55537c33239043fcfeb990408ea5adf1fcc485fa1ae00a778658211aaf8d1871d691921d0755c9908e72f4cccfedc839795189a2f42a735ec40e1257d840903201c2ac9d6a266f7d0accbb39bad4e867b7f23de46bd9f774dbc600fe7add07e663b1f2a13c4366528ad192d4985a0407329c2f095887953f81798af76ea7301063e31fce564fb1d3fa92949cb1736e658eb29457003f44a9d57a90ff4523f0a7334c572b52b9e29adcdf7a9ef2ac6a2eed2b62931c71efbea56f4eab96624a795d115f89ed026725d0139132e9836a551b64805c25f2869fa4b8b379f091347b64ccae416377cc75fda4d3ddda4592dc7e6902a1c9b16ef683e617b04a2a59960d894a60df2bcdd2b7500045f0a24964757fe9ff6f1b70e67924c22cd0f5cb8eb70fc28b9ce5c7a086e605a09115ff52b156d37080cd1f249a29b2f64b7a727ca40298b31447bcaa031dbc5ad7e9e4c306fea984d65f9f7df48fe4731470e456f6ed120abc80b0fe1d68ec5b74fde112feb05dfaef360594f1272e90ac0cb85f68fbc4073045460a9b55e19dd8bbc6faf073f113375e1e02a518bc18146278be4e2c213fa6716e19bf959a30703270c801492c137418fc49639d045e5e6af52212520aa3497df5765532bda0341979d67dbc864182dd505861278eefced9f150b3c119a1356db4f39cf679b1725403cfcabfc4623935d74f2616b5ae9aa014adc44bd7dffac35a4568e0dd47b16c7c4338850e549d47cb5c70af631f7b73e5a9e89919b2debb0579b056018f8bf89518f946d185f7f5731783f611b130e0a2143c400cf5ad6b6308250f889ff609f8e659852279b2ade2ddb02d2ca30334884a168321cd252a4c8e2794c06328b262d12b8ce73ceac70847463e738bd88d7fc7a490cd5550b8c68407f5e3fe7e744621b0f2aec821b3941a08bdbdc9ee68edc8cd9d116b3996db18cf505276ed0cda20b08c109d199df649dfc084050d8818d479f3ea5856da6b772af6619cb8627227ce416b632aeebd86ffd03a1c577439ddc98d8adc9134a15aeb05c430533d3f7003582819e08a179a6e3df5bed5630b371c11eb171c1bc0b41ea0a5b84b04cef1c936dee441da720fb4b78c63a9fbd5c954880eeb66f46dab6001d24c92e5d9011e78f53fb5654aba2263c00220c073f9e5a78844fdb46b70bc67c3fbf6c3cd108d4ef1c6a70c61f6fe3ccfd2ca4fa0067fa3e5f1958070aa2db0732d455ca90dca008280e89600b5b2f9c19168e44119e0ee187412b2778f2d5bdf1491d7e0211e88014e126fed50adcafc2f68e0e0fa3459b5b30fee6d9727c50895b3c33bf4c76721f7bac914cfa8b3d366e7c153c11dc296dd1dda9c03a2bc1bf902ee9b1784d7fed98e6c7f6c9e59870da960c1db1392489ba870e948ece17e02d81e6f3a51ba90b23aaf375673a71dd8a2dbfb8d9c3497ce8b5ea3c72ff86e65e1562b0c8038355f301865244112ff04133036e143d3da28624750d7326257c08d13d24385ead981c8b75ccec2fef1a11684368cd2281a3a9d6a58e7a09c25326624804eb9aa09c17ad503918772066eac0b71915c651eec9a0151cad7cb84713f4692d88b7df8833960dce14980cfee913af681a6d3c3513bfe1fc11bc4794d89fe0d4a60b274107995c9fb754f0d100543fc1c611b7dbeb985780260366ae23961d73a7f56c36850f2bc1dc444681bda3c0d4287e934471207573c646916fc295aa28f5df4ff71941611e2422647f48672a64fb8523d4f8254e0775282480581ef9272cdb25a7a5f4c8af2069abb5c6bc5e72cc76325da5905c806a6c61dfad57d0cac19bcc1a16c81987387a40d7bfe0a2aa4f06a909c399b8f901aa2bfb7768557f522af4705071fce50a77c8eaf44b6f19bd100c76ac67a1237c4873f54de560439e4fa320ab4b4f4c715965b0a95616b9c6094b125ed3b8922323d2a41637b0d3ac83b5960c71c010672642f3e6d151fe7609a695f87a70c4ce32bdd62c46a4c04fa9c0378c686a84234ebc69a0e0df7e2e1f90771d4d5168653494b03e3c264796b62e224cb1b8c664f30092531e96846ee654868f8d19cd9ce3761bd687349c7530a7a1ced22bd1a3625fa8fe07a74837d767912340ba54f3e114ae9dc76a3c4c7c9905fbf7fb59e425eb1b0f662e9c6cc83756a58bce3b2b70f306f2f97caae83f96ad0a36dd560ba7a2cf5bc394e1a6ea089df7c08854b3fa3ad005a8911bf7cef342ef8a9082de9a1b0691838607b977b4aef75f068ab32257f66cda3e1435671c2f219fdc085dee26fd220c9e3a06e7cc8cd59587c24bf840c4c50c06debd495f3e13e426fda4531414d819a5c511ea253bba827e34378da34ac524f58a5d24a1c2216d475df3be4ccf3f70af71e2d14c6a0d32f6e48ee6a1e2cce9e4ca19cfbba7256d8669df869a7e71f5563b0ee8a4f8c361cd66421c3a1487bc4c1f3c4d6f881c9c5b2e66a9e25f2e85ef4e09b166ba60afcf3d8deaf63847dedb4e545e186e2b80e072a9e4b31402dc89314d0457859e5277225d4ad30fb12cdad591d9ffbd65d04caa7f71f2b0aab2cea4297b8408cd7faaa39c9d17656506eb8ac1f5e222de59deac77177a8337300d8da01ba3ec673e9206aa021a73258aabb3e3de1e59a3c00e26f45ed71eb2ca4d0b8b67c4c1c07e204774becdd455f3d65fd5d302e354ee1dc03c8bcfffa468b655e5665322d8ccde28a8cf4e8b7d2d99f8f0055a76adb76789ab00779796343db29b699b4d29c291c4a667b399b4a0b34dc086f1f8b55d7e683ef3964b39e2a3aad464e1197bde00aa8db22ab1b521c903bfc37eb1698372358c850f21e5d8bbc228e2e367038d612a6024800fa5d2463ff7c9e8f323ca34f38b4a549719265d0a6de4d635bc7ce846a63d94f15128241fe77c26a3365619db155ddd272d48b148bbe65f8e4a7f9ee98df58cc837de4f43d5d01c52dbf9514d06fc45156c0d4e22612987056298aed28e8bc6174aa26c59093a209ee36397772b961d2ada5326187b1a35c3e471fb3997e764c9182e75354a2115cef79ed42bee178e2997ead57d49de70faa3dd43d0ba775cd4a83683ae24d8a843ad694ebcc3c3d6df0f0335526fa4b452d5b3421aab03f6e471d5487219b799bced05cbefb2cc64d6a653daba348d12c78d3c1fc9607eb85b583fc160f433a3f5fea2dba4fda1c602cb5be7daede4fe3933e8b8a9c22fd0d445db6318e7c9a405d54aea55e9acf3bf7f554429114433f62519afc2d92d2d2080fdf176d9288cfba343e6c8cc41bb05e7a86432", 0x1000}, {&(0x7f0000000080)="e90504bc5bf84f7165e37967ed962a6f7b2ba6ad05937055bb4e272c59f43b8a7d02aa37de38fc358cf4475ba2817998b285430b57b642a0c8f3d3d3ba5e60bfbef15b85f4c2ffa5cf57b428b8f17ad79b93311b7aaa89970e7ce6d39eb1ce2ae34ea14271c9067cf42f827496732b004f53828aba", 0x75}, {&(0x7f0000001140)="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", 0xfa}, {&(0x7f0000001240)="6e0e1be8017ea5d5c0fa3063e801551846ae4c4436710fcd5eea66a97319b79b8fdc08124e90d232336650e2c80d1d721dde4d39d824f52bf6efad70f90f3a3b573ca938a49efafb", 0x48}, {&(0x7f00000012c0)="1544f97bb7d3b104269347bdba7f708b04e510988d474a2b3c4666b7c37b9499315f33b51d67a01e393b52f5a7b51b3e05", 0x31}], 0x5, &(0x7f0000001380)=[{0xa8, 0x103, 0x6, "c1caca25736de26b6ecbd1a5c5859df97fb040a9b548eb1440fabdcd0e8b9808f4c070c72621fc78b1dcb632a1b82459747f67bcf3e1baba1cd2fe50d2bd796856d354c7f7f876f056ad144ca4c82bf113535298153656f250511b9a5549fa45ac6e09fad1662feac4050a4c7ff6930f0fcc33c8c837ad19c5f3a0f619241fe4f94c23af147e2745a39b0f305d21264f58ac"}, {0x28, 0x102, 0x3, "092c6d2d1da95804f90e799a35ac5fc67749c3ac0b01e4"}, {0xb8, 0x10e, 0xff, "fa20d2fb123b810341d430d9bb18356d268e4e8497ceb464edcd4509db576b878245800d445509576b7f4595f6fd7fe85079ebac1539692ea1894acdf81c26cf862e76791320d30341fedb3c69adea7b0e0328807522cfc211e9cb8fe03b6c4ce64ffb711c7439bc3642832b2221e66be0639fb10a398bcb374018e638c09f3aa6714347cecb849d5600c53231f3d76d7ca53f27f749e4aee669bcb139f46aa3e7331a2df685"}], 0x188, 0x4004011}, 0x38) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x3c, 0x4) 17:26:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x52, &(0x7f0000000200)=""/82, 0x41100, 0x11, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xd, 0x5, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, 0xffffffffffffffff, 0x11}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000400), &(0x7f0000000440)=0x14) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f8ff000000000000"], 0xfffffdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) 17:26:35 executing program 2: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x7, 0x7fffffff, {{0x10, 0x4, 0x1, 0x3f, 0x40, 0x67, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010101, {[@cipso={0x86, 0x2a, 0x1, [{0x5, 0x8, "84b77224ff04"}, {0x5, 0x7, "c413a62af1"}, {0x7, 0x12, "4b6995a32d6036917cde2b0a8e1d14fd"}, {0x5, 0x3, 'A'}]}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x70}}, 0x801) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x24008040) connect$l2tp6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x3, @private1, 0x1ff, 0x4}, 0x20) syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x240400) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:35 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) (async) 17:26:35 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r1, &(0x7f0000001540)={&(0x7f0000000040)={0x2a, 0x1, 0x4001}, 0xc, &(0x7f0000001300)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000000080)="e90504bc5bf84f7165e37967ed962a6f7b2ba6ad05937055bb4e272c59f43b8a7d02aa37de38fc358cf4475ba2817998b285430b57b642a0c8f3d3d3ba5e60bfbef15b85f4c2ffa5cf57b428b8f17ad79b93311b7aaa89970e7ce6d39eb1ce2ae34ea14271c9067cf42f827496732b004f53828aba", 0x75}, {&(0x7f0000001140)="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", 0xfa}, {&(0x7f0000001240)="6e0e1be8017ea5d5c0fa3063e801551846ae4c4436710fcd5eea66a97319b79b8fdc08124e90d232336650e2c80d1d721dde4d39d824f52bf6efad70f90f3a3b573ca938a49efafb", 0x48}, {&(0x7f00000012c0)="1544f97bb7d3b104269347bdba7f708b04e510988d474a2b3c4666b7c37b9499315f33b51d67a01e393b52f5a7b51b3e05", 0x31}], 0x5, &(0x7f0000001380)=[{0xa8, 0x103, 0x6, "c1caca25736de26b6ecbd1a5c5859df97fb040a9b548eb1440fabdcd0e8b9808f4c070c72621fc78b1dcb632a1b82459747f67bcf3e1baba1cd2fe50d2bd796856d354c7f7f876f056ad144ca4c82bf113535298153656f250511b9a5549fa45ac6e09fad1662feac4050a4c7ff6930f0fcc33c8c837ad19c5f3a0f619241fe4f94c23af147e2745a39b0f305d21264f58ac"}, {0x28, 0x102, 0x3, "092c6d2d1da95804f90e799a35ac5fc67749c3ac0b01e4"}, {0xb8, 0x10e, 0xff, "fa20d2fb123b810341d430d9bb18356d268e4e8497ceb464edcd4509db576b878245800d445509576b7f4595f6fd7fe85079ebac1539692ea1894acdf81c26cf862e76791320d30341fedb3c69adea7b0e0328807522cfc211e9cb8fe03b6c4ce64ffb711c7439bc3642832b2221e66be0639fb10a398bcb374018e638c09f3aa6714347cecb849d5600c53231f3d76d7ca53f27f749e4aee669bcb139f46aa3e7331a2df685"}], 0x188, 0x4004011}, 0x38) (async, rerun: 64) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x3c, 0x4) (rerun: 64) 17:26:35 executing program 2: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x7, 0x7fffffff, {{0x10, 0x4, 0x1, 0x3f, 0x40, 0x67, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010101, {[@cipso={0x86, 0x2a, 0x1, [{0x5, 0x8, "84b77224ff04"}, {0x5, 0x7, "c413a62af1"}, {0x7, 0x12, "4b6995a32d6036917cde2b0a8e1d14fd"}, {0x5, 0x3, 'A'}]}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x70}}, 0x801) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x24008040) connect$l2tp6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x3, @private1, 0x1ff, 0x4}, 0x20) (async) syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x240400) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:35 executing program 4: memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) 17:26:35 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6) 17:26:35 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000001aa00"], 0xfffffdef) 17:26:35 executing program 4: memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) 17:26:35 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:35 executing program 2: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x7, 0x7fffffff, {{0x10, 0x4, 0x1, 0x3f, 0x40, 0x67, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010101, {[@cipso={0x86, 0x2a, 0x1, [{0x5, 0x8, "84b77224ff04"}, {0x5, 0x7, "c413a62af1"}, {0x7, 0x12, "4b6995a32d6036917cde2b0a8e1d14fd"}, {0x5, 0x3, 'A'}]}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x70}}, 0x801) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x24008040) connect$l2tp6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x3, @private1, 0x1ff, 0x4}, 0x20) syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x240400) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x7, 0x7fffffff, {{0x10, 0x4, 0x1, 0x3f, 0x40, 0x67, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010101, {[@cipso={0x86, 0x2a, 0x1, [{0x5, 0x8, "84b77224ff04"}, {0x5, 0x7, "c413a62af1"}, {0x7, 0x12, "4b6995a32d6036917cde2b0a8e1d14fd"}, {0x5, 0x3, 'A'}]}]}}}}}) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x70}}, 0x801) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x24008040) (async) connect$l2tp6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x3, @private1, 0x1ff, 0x4}, 0x20) (async) syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x240400) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) 17:26:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x52, &(0x7f0000000200)=""/82, 0x41100, 0x11, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xd, 0x5, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, 0xffffffffffffffff, 0x11}, 0x10) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000400), &(0x7f0000000440)=0x14) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f8ff000000000000"], 0xfffffdef) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) 17:26:35 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x440400) 17:26:35 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x440400) 17:26:35 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x440400) 17:26:35 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:35 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000001aa00"], 0xfffffdef) 17:26:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x52, &(0x7f0000000200)=""/82, 0x41100, 0x11, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xd, 0x5, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, 0xffffffffffffffff, 0x11}, 0x10) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000400), &(0x7f0000000440)=0x14) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f8ff000000000000"], 0xfffffdef) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) 17:26:35 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:35 executing program 4: memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) 17:26:35 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:35 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000001aa00"], 0xfffffdef) 17:26:35 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:35 executing program 0: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local}, 0x20) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00c61e9cd9eed72fede2e58ce70889f98de7f1b8b94b8f7656a1d64ef6d791d9d81d8dccf4351ce2095cc43ad988b294d8c8b9164786e2d888979c9aa4f5285a7c7fc5ca5d88cefa12d13fffb6aaad23c057937724859bac11d05473176288080466519a81d1ca7049212ebc391c4ed16c75bfb6d228e7d0d873a204126db497c568f5bd34b1f6cc5b83126000320daaa778bc7865e8d3170eed8e97e907fd51a891f6b880d96b438e"], 0xfffffdef) 17:26:35 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:35 executing program 1: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x400) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x2}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x400) openat$cgroup_int(r3, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "c617a2", 0x3, 0x9}) 17:26:35 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:35 executing program 4: memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:26:35 executing program 1: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x400) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x2}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x400) openat$cgroup_int(r3, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "c617a2", 0x3, 0x9}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x400) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x2}, {@fixed}}}, 0xfffffdef) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x400) (async) openat$cgroup_int(r3, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "c617a2", 0x3, 0x9}) (async) 17:26:36 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:36 executing program 4: memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) 17:26:36 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:36 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:36 executing program 0: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local}, 0x20) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00c61e9cd9eed72fede2e58ce70889f98de7f1b8b94b8f7656a1d64ef6d791d9d81d8dccf4351ce2095cc43ad988b294d8c8b9164786e2d888979c9aa4f5285a7c7fc5ca5d88cefa12d13fffb6aaad23c057937724859bac11d05473176288080466519a81d1ca7049212ebc391c4ed16c75bfb6d228e7d0d873a204126db497c568f5bd34b1f6cc5b83126000320daaa778bc7865e8d3170eed8e97e907fd51a891f6b880d96b438e"], 0xfffffdef) 17:26:36 executing program 1: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x400) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x2}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x400) openat$cgroup_int(r3, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "c617a2", 0x3, 0x9}) 17:26:36 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:36 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:36 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x244800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) 17:26:36 executing program 4: memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 17:26:36 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:36 executing program 0: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local}, 0x20) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00c61e9cd9eed72fede2e58ce70889f98de7f1b8b94b8f7656a1d64ef6d791d9d81d8dccf4351ce2095cc43ad988b294d8c8b9164786e2d888979c9aa4f5285a7c7fc5ca5d88cefa12d13fffb6aaad23c057937724859bac11d05473176288080466519a81d1ca7049212ebc391c4ed16c75bfb6d228e7d0d873a204126db497c568f5bd34b1f6cc5b83126000320daaa778bc7865e8d3170eed8e97e907fd51a891f6b880d96b438e"], 0xfffffdef) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local}, 0x20) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00c61e9cd9eed72fede2e58ce70889f98de7f1b8b94b8f7656a1d64ef6d791d9d81d8dccf4351ce2095cc43ad988b294d8c8b9164786e2d888979c9aa4f5285a7c7fc5ca5d88cefa12d13fffb6aaad23c057937724859bac11d05473176288080466519a81d1ca7049212ebc391c4ed16c75bfb6d228e7d0d873a204126db497c568f5bd34b1f6cc5b83126000320daaa778bc7865e8d3170eed8e97e907fd51a891f6b880d96b438e"], 0xfffffdef) (async) 17:26:36 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:36 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:36 executing program 4: memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 17:26:36 executing program 4: memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:26:36 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x244800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) 17:26:36 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:36 executing program 4: memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) 17:26:36 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_scan_param={{0x200b, 0x7}, {0x78, 0x800, 0x5, 0x7c, 0x41}}}, 0xb) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000000c0), 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8a00"], 0xfffffdef) 17:26:36 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x244800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x244800) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) (async) 17:26:36 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:36 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:36 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) getegid() 17:26:36 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x6, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xb29a, 0xd5, &(0x7f0000000100)=""/213, 0x41100, 0x13, '\x00', 0x0, 0x17, r0, 0x8, &(0x7f0000000240)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xe, 0x7f, 0xfffffffc}, 0x10}, 0x80) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x40) 17:26:36 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:36 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_scan_param={{0x200b, 0x7}, {0x78, 0x800, 0x5, 0x7c, 0x41}}}, 0xb) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000000c0), 0x4) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8a00"], 0xfffffdef) 17:26:36 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:36 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x6, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xb29a, 0xd5, &(0x7f0000000100)=""/213, 0x41100, 0x13, '\x00', 0x0, 0x17, r0, 0x8, &(0x7f0000000240)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xe, 0x7f, 0xfffffffc}, 0x10}, 0x80) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x40) 17:26:36 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:36 executing program 4: memfd_create(&(0x7f0000000040)='^!\'(\x00', 0x191457af20e965ec) 17:26:36 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x48a02) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x6, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xb29a, 0xd5, &(0x7f0000000100)=""/213, 0x41100, 0x13, '\x00', 0x0, 0x17, r0, 0x8, &(0x7f0000000240)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xe, 0x7f, 0xfffffffc}, 0x10}, 0x80) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x40) 17:26:36 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:36 executing program 4: memfd_create(0x0, 0x191457af20e965ec) 17:26:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20008084) syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0xc0080) 17:26:36 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) getegid() 17:26:36 executing program 4: memfd_create(0x0, 0x0) 17:26:36 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:36 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_scan_param={{0x200b, 0x7}, {0x78, 0x800, 0x5, 0x7c, 0x41}}}, 0xb) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000000c0), 0x4) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8a00"], 0xfffffdef) 17:26:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x1}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20008084) (async, rerun: 32) syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0xc0080) 17:26:36 executing program 4: memfd_create(0x0, 0x0) 17:26:36 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:36 executing program 4: memfd_create(0x0, 0x0) 17:26:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20008084) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0xc0080) 17:26:36 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffc01}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4805) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:36 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:36 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffc01}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4805) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:36 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) getegid() 17:26:36 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x3f, 0x80, 0x6, "5e63220c3abdcbae48f620875b2cc826ccc13c25cb1e20cc28607355b34c7f"}}}, 0x27) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:36 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="010a140500aed89b8a00000400"], 0x9) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00f808ae3f32e62680fcfe8c3b8ed7"], 0xaf4e0fb8) r1 = getpid() getpgid(r1) ptrace$peeksig(0x4209, r1, &(0x7f00000002c0)={0xbc, 0x0, 0x2}, &(0x7f0000000340)=[{}, {}]) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x5, 0x8, 0xe4, &(0x7f0000000140)="6f5d78e36f60cf347825657002c3eefaa298280143d9ad5a97cf9a0a18260e71849aa86feb9feceea8b3159fddd3ac499028600092e336020e07dc183ccfa1002a1a21b029b7b340077cf897966f934c65abc17c806446ec3d3de6d31e5d2b76f5e94527d8580853a0de4a952d97c57f117cf44da7dc772a630506483c73399a3e0371f9acd5763d7703a9100b8f0483e4418fc3e7669d4ffde9347ca8ad25f979fb1a4acc1b4622eb0967ddcbe0a97e0a95968956422083b8ba1684babc557e2f92be91a43fcdc053e760a2bd617c5cbe65733056dc626b2b25c6ecc12ec3afc565b244"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000040)=[@exit_looper, @acquire_done, @exit_looper], 0x2, 0x0, &(0x7f0000000240)='}5'}) 17:26:36 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:36 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:36 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffc01}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4805) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:36 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:36 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xffff) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaa98aa00ed5cbad6932765bb8d3002ae7ed4855a4e99110b3c3c4d28bd48dc1791e14c349fcc55fc606ffc5b47b9a56367a757155d54d794a0cf23913e091ee45de0eb49c83df3a74146d01754d65264"], 0xfffffdef) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x101, 0x2}) 17:26:36 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:36 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:36 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="010a140500aed89b8a00000400"], 0x9) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00f808ae3f32e62680fcfe8c3b8ed7"], 0xaf4e0fb8) r1 = getpid() getpgid(r1) ptrace$peeksig(0x4209, r1, &(0x7f00000002c0)={0xbc, 0x0, 0x2}, &(0x7f0000000340)=[{}, {}]) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x5, 0x8, 0xe4, &(0x7f0000000140)="6f5d78e36f60cf347825657002c3eefaa298280143d9ad5a97cf9a0a18260e71849aa86feb9feceea8b3159fddd3ac499028600092e336020e07dc183ccfa1002a1a21b029b7b340077cf897966f934c65abc17c806446ec3d3de6d31e5d2b76f5e94527d8580853a0de4a952d97c57f117cf44da7dc772a630506483c73399a3e0371f9acd5763d7703a9100b8f0483e4418fc3e7669d4ffde9347ca8ad25f979fb1a4acc1b4622eb0967ddcbe0a97e0a95968956422083b8ba1684babc557e2f92be91a43fcdc053e760a2bd617c5cbe65733056dc626b2b25c6ecc12ec3afc565b244"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000040)=[@exit_looper, @acquire_done, @exit_looper], 0x2, 0x0, &(0x7f0000000240)='}5'}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="010a140500aed89b8a00000400"], 0x9) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00f808ae3f32e62680fcfe8c3b8ed7"], 0xaf4e0fb8) (async) getpid() (async) getpgid(r1) (async) ptrace$peeksig(0x4209, r1, &(0x7f00000002c0)={0xbc, 0x0, 0x2}, &(0x7f0000000340)=[{}, {}]) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x5, 0x8, 0xe4, &(0x7f0000000140)="6f5d78e36f60cf347825657002c3eefaa298280143d9ad5a97cf9a0a18260e71849aa86feb9feceea8b3159fddd3ac499028600092e336020e07dc183ccfa1002a1a21b029b7b340077cf897966f934c65abc17c806446ec3d3de6d31e5d2b76f5e94527d8580853a0de4a952d97c57f117cf44da7dc772a630506483c73399a3e0371f9acd5763d7703a9100b8f0483e4418fc3e7669d4ffde9347ca8ad25f979fb1a4acc1b4622eb0967ddcbe0a97e0a95968956422083b8ba1684babc557e2f92be91a43fcdc053e760a2bd617c5cbe65733056dc626b2b25c6ecc12ec3afc565b244"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000040)=[@exit_looper, @acquire_done, @exit_looper], 0x2, 0x0, &(0x7f0000000240)='}5'}) (async) 17:26:36 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000080", @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf250800000008001700", @ANYRES32=r1, @ANYBLOB="060003000200000006001b004e2000000500060002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x20000004) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) 17:26:36 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000080", @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf250800000008001700", @ANYRES32=r1, @ANYBLOB="060003000200000006001b004e2000000500060002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x20000004) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) 17:26:36 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000080", @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf250800000008001700", @ANYRES32=r1, @ANYBLOB="060003000200000006001b004e2000000500060002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x20000004) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) 17:26:36 executing program 2: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c1}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff2fb4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0xff}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x58}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="010a140500aed89b8a00000400"], 0x9) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00f808ae3f32e62680fcfe8c3b8ed7"], 0xaf4e0fb8) r1 = getpid() getpgid(r1) ptrace$peeksig(0x4209, r1, &(0x7f00000002c0)={0xbc, 0x0, 0x2}, &(0x7f0000000340)=[{}, {}]) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x5, 0x8, 0xe4, &(0x7f0000000140)="6f5d78e36f60cf347825657002c3eefaa298280143d9ad5a97cf9a0a18260e71849aa86feb9feceea8b3159fddd3ac499028600092e336020e07dc183ccfa1002a1a21b029b7b340077cf897966f934c65abc17c806446ec3d3de6d31e5d2b76f5e94527d8580853a0de4a952d97c57f117cf44da7dc772a630506483c73399a3e0371f9acd5763d7703a9100b8f0483e4418fc3e7669d4ffde9347ca8ad25f979fb1a4acc1b4622eb0967ddcbe0a97e0a95968956422083b8ba1684babc557e2f92be91a43fcdc053e760a2bd617c5cbe65733056dc626b2b25c6ecc12ec3afc565b244"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000040)=[@exit_looper, @acquire_done, @exit_looper], 0x2, 0x0, &(0x7f0000000240)='}5'}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="010a140500aed89b8a00000400"], 0x9) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa00f808ae3f32e62680fcfe8c3b8ed7"], 0xaf4e0fb8) (async) getpid() (async) getpgid(r1) (async) ptrace$peeksig(0x4209, r1, &(0x7f00000002c0)={0xbc, 0x0, 0x2}, &(0x7f0000000340)=[{}, {}]) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x5, 0x8, 0xe4, &(0x7f0000000140)="6f5d78e36f60cf347825657002c3eefaa298280143d9ad5a97cf9a0a18260e71849aa86feb9feceea8b3159fddd3ac499028600092e336020e07dc183ccfa1002a1a21b029b7b340077cf897966f934c65abc17c806446ec3d3de6d31e5d2b76f5e94527d8580853a0de4a952d97c57f117cf44da7dc772a630506483c73399a3e0371f9acd5763d7703a9100b8f0483e4418fc3e7669d4ffde9347ca8ad25f979fb1a4acc1b4622eb0967ddcbe0a97e0a95968956422083b8ba1684babc557e2f92be91a43fcdc053e760a2bd617c5cbe65733056dc626b2b25c6ecc12ec3afc565b244"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000040)=[@exit_looper, @acquire_done, @exit_looper], 0x2, 0x0, &(0x7f0000000240)='}5'}) (async) 17:26:37 executing program 2: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c1}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff2fb4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0xff}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x58}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:37 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:37 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xffff) (rerun: 32) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaa98aa00ed5cbad6932765bb8d3002ae7ed4855a4e99110b3c3c4d28bd48dc1791e14c349fcc55fc606ffc5b47b9a56367a757155d54d794a0cf23913e091ee45de0eb49c83df3a74146d01754d65264"], 0xfffffdef) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x101, 0x2}) 17:26:37 executing program 2: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c1}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff2fb4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0xff}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x58}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c1}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff2fb4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0xff}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x58}}, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) 17:26:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_add_to_resolv_list={{}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "0545452fa34cf27dba42ce77a08f8836", "76fbe05538d068029f31a2331ecb4293"}}}, 0xfffffffffffffe86) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:37 executing program 2: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x10000) sendto$unix(r1, &(0x7f0000000140)="4095d08295c57a51488ac45515af656ecf854453148f11e3161e9ee00d52", 0x1e, 0x4015, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 17:26:37 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:37 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xffff) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaa98aa00ed5cbad6932765bb8d3002ae7ed4855a4e99110b3c3c4d28bd48dc1791e14c349fcc55fc606ffc5b47b9a56367a757155d54d794a0cf23913e091ee45de0eb49c83df3a74146d01754d65264"], 0xfffffdef) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x101, 0x2}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xffff) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaa98aa00ed5cbad6932765bb8d3002ae7ed4855a4e99110b3c3c4d28bd48dc1791e14c349fcc55fc606ffc5b47b9a56367a757155d54d794a0cf23913e091ee45de0eb49c83df3a74146d01754d65264"], 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x101, 0x2}) (async) 17:26:37 executing program 2: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x10000) sendto$unix(r1, &(0x7f0000000140)="4095d08295c57a51488ac45515af656ecf854453148f11e3161e9ee00d52", 0x1e, 0x4015, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x10000) (async) sendto$unix(r1, &(0x7f0000000140)="4095d08295c57a51488ac45515af656ecf854453148f11e3161e9ee00d52", 0x1e, 0x4015, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) 17:26:37 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 2: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x10000) sendto$unix(r1, &(0x7f0000000140)="4095d08295c57a51488ac45515af656ecf854453148f11e3161e9ee00d52", 0x1e, 0x4015, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 17:26:37 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xffffffe1) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400, 0x20000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x10000009, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000428bd8400fbdbdf090000000005003000010000000800340040000000"], 0x24}, 0x1, 0x0, 0x0, 0x10800}, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x9ea18ddcec68822) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xffff) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r1}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x840) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) (async, rerun: 64) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_add_to_resolv_list={{}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "0545452fa34cf27dba42ce77a08f8836", "76fbe05538d068029f31a2331ecb4293"}}}, 0xfffffffffffffe86) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:37 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaaaa18aa00"], 0xfffffdef) 17:26:37 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xffffffe1) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400, 0x20000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x10000009, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000428bd8400fbdbdf090000000005003000010000000800340040000000"], 0x24}, 0x1, 0x0, 0x0, 0x10800}, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x9ea18ddcec68822) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xffff) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r1}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x840) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_add_to_resolv_list={{}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "0545452fa34cf27dba42ce77a08f8836", "76fbe05538d068029f31a2331ecb4293"}}}, 0xfffffffffffffe86) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:37 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:37 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaaaa18aa00"], 0xfffffdef) 17:26:37 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaaaa18aa00"], 0xfffffdef) 17:26:37 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xffffffe1) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400, 0x20000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x10000009, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000428bd8400fbdbdf090000000005003000010000000800340040000000"], 0x24}, 0x1, 0x0, 0x0, 0x10800}, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x9ea18ddcec68822) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xffff) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r1}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x840) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:37 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) getpeername$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 17:26:37 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaaaa18aa00"], 0xfffffdef) 17:26:37 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) getpeername$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) (async) getpeername$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 17:26:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:37 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaaaa18aa00"], 0xfffffdef) 17:26:37 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x1, 0x400, 0x1, 0xffffff00}) 17:26:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:37 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) getpeername$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 17:26:37 executing program 5: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:37 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaaaa18aa00"], 0xfffffdef) 17:26:37 executing program 5: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 5: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x1, 0x400, 0x1, 0xffffff00}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x1, 0x400, 0x1, 0xffffff00}) (async) 17:26:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="05a6e109a74980e6e4c480c133fe4df0cc52bd3381743447fe3c"], 0xfffffdef) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x539a82) 17:26:37 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:37 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xffffffe1) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400, 0x20000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x10000009, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000428bd8400fbdbdf090000000005003000010000000800340040000000"], 0x24}, 0x1, 0x0, 0x0, 0x10800}, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x9ea18ddcec68822) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xffff) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r1}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x840) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:37 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x539a82) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x539a82) (async) 17:26:37 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x539a82) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffc, 0x539a82) (async) 17:26:37 executing program 2: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf2506000080080019000a010100140008006d6163766c616e310000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4041) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040844}, 0x40000041) 17:26:37 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:38 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x1, 0x400, 0x1, 0xffffff00}) 17:26:38 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="05a6e109a74980e6e4c480c133fe4df0cc52bd3381743447fe3c"], 0xfffffdef) 17:26:38 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:38 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:38 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:38 executing program 2: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf2506000080080019000a010100140008006d6163766c616e310000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4041) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040844}, 0x40000041) 17:26:38 executing program 1: socketpair(0x25, 0x4, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000080)=0x81) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x149042) write$bt_hci(r2, &(0x7f0000000040)={0x1, @write_class_of_dev={{0xc24, 0x3}}}, 0x7) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) 17:26:38 executing program 1: socketpair(0x25, 0x4, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000080)=0x81) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x149042) write$bt_hci(r2, &(0x7f0000000040)={0x1, @write_class_of_dev={{0xc24, 0x3}}}, 0x7) (async, rerun: 32) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) (rerun: 32) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) 17:26:38 executing program 1: socketpair(0x25, 0x4, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000080)=0x81) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x149042) write$bt_hci(r2, &(0x7f0000000040)={0x1, @write_class_of_dev={{0xc24, 0x3}}}, 0x7) (async) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) 17:26:38 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:38 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:38 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:38 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:38 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="05a6e109a74980e6e4c480c133fe4df0cc52bd3381743447fe3c"], 0xfffffdef) 17:26:38 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:38 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x140c, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r0}) accept4$unix(r2, 0x0, &(0x7f0000000380), 0x800) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:38 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:38 executing program 2: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf2506000080080019000a010100140008006d6163766c616e310000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4041) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040844}, 0x40000041) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf2506000080080019000a010100140008006d6163766c616e310000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4041) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040844}, 0x40000041) (async) 17:26:38 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:38 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (fail_nth: 1) 17:26:38 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1404, 0x300, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:38 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:38 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x140c, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x14) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r0}) accept4$unix(r2, 0x0, &(0x7f0000000380), 0x800) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:38 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x140c, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x14) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r0}) accept4$unix(r2, 0x0, &(0x7f0000000380), 0x800) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:38 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a42) 17:26:38 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:38 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:38 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a42) 17:26:38 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x3}}}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:38 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01ea0406aaaaaaaaaa00"], 0xfffffdef) 17:26:38 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (fail_nth: 2) [ 2323.040433][T13522] FAULT_INJECTION: forcing a failure. [ 2323.040433][T13522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2323.053541][T13522] CPU: 1 PID: 13522 Comm: syz-executor.4 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2323.064485][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2323.074605][T13522] Call Trace: [ 2323.077884][T13522] [ 2323.080866][T13522] dump_stack_lvl+0xd6/0x122 [ 2323.085521][T13522] dump_stack+0x11/0x12 17:26:38 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x3}}}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x3}}}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:38 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a42) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a42) (async) 17:26:38 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01ea0406aaaaaaaaaa00"], 0xfffffdef) 17:26:38 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:38 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) [ 2323.089833][T13522] should_fail+0x242/0x250 [ 2323.094336][T13522] should_fail_usercopy+0x16/0x20 [ 2323.099367][T13522] _copy_from_user+0x1a/0xc0 [ 2323.104035][T13522] kstrtouint_from_user+0x81/0xf0 [ 2323.109105][T13522] proc_fail_nth_write+0x4b/0x150 [ 2323.114221][T13522] ? proc_fail_nth_read+0x150/0x150 [ 2323.119434][T13522] vfs_write+0x25c/0x760 [ 2323.123724][T13522] ? __fget_files+0x1a7/0x1e0 [ 2323.128444][T13522] ksys_write+0xe8/0x1a0 [ 2323.132769][T13522] __x64_sys_write+0x3e/0x50 [ 2323.137432][T13522] do_syscall_64+0x2b/0x70 [ 2323.141884][T13522] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2323.147808][T13522] RIP: 0033:0x7fe6a860ed8f [ 2323.152255][T13522] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2323.171977][T13522] RSP: 002b:00007fe6a7db1160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2323.180401][T13522] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe6a860ed8f 17:26:38 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:38 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) [ 2323.188438][T13522] RDX: 0000000000000001 RSI: 00007fe6a7db11e0 RDI: 0000000000000004 [ 2323.196441][T13522] RBP: 00007fe6a7db11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2323.204451][T13522] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2323.212430][T13522] R13: 00007ffe94413b5f R14: 00007fe6a7db1300 R15: 0000000000022000 [ 2323.220442][T13522] 17:26:38 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:38 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x3}}}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x3}}}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:38 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01ea0406aaaaaaaaaa00"], 0xfffffdef) 17:26:38 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r0, 0xd}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x401, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) 17:26:38 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x3f, 0x4) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:38 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:38 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 17:26:39 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 32) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x3f, 0x4) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r0, 0xd}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x401, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r0, 0xd}, 0x10) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x401}, 0x8) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) (async) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc00, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f500c400100000000000000000000000c6311000c6300000963504000000b08540000000000000000000000000700002688db9ca413df145995905a66f11f2c2fac6bc7b875baaac523fcb17f08d97ff6dae2f8f3c2bec5e6d0f4ff365172f795fec12448a5ebe7e6b82c4e7a869d5c06392aa92595b6d7ca0e2fdd68c74532bb8a6851e411c0e01094487acad886d1db4fc73bf79fdc294cd07c840bdfce"], 0x2f, 0x0, &(0x7f00000000c0)="198a18e19dcb04d01be6f0b25f69e4dca5f36f78de0cc17fa9d3097db2059699f08814e7ba8f9edf9d37ea11b26fbd"}) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 17:26:39 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x6) 17:26:39 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r0, 0xd}, 0x10) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x401, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) 17:26:39 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x3f, 0x4) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc00, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f500c400100000000000000000000000c6311000c6300000963504000000b08540000000000000000000000000700002688db9ca413df145995905a66f11f2c2fac6bc7b875baaac523fcb17f08d97ff6dae2f8f3c2bec5e6d0f4ff365172f795fec12448a5ebe7e6b82c4e7a869d5c06392aa92595b6d7ca0e2fdd68c74532bb8a6851e411c0e01094487acad886d1db4fc73bf79fdc294cd07c840bdfce"], 0x2f, 0x0, &(0x7f00000000c0)="198a18e19dcb04d01be6f0b25f69e4dca5f36f78de0cc17fa9d3097db2059699f08814e7ba8f9edf9d37ea11b26fbd"}) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc00, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f500c400100000000000000000000000c6311000c6300000963504000000b08540000000000000000000000000700002688db9ca413df145995905a66f11f2c2fac6bc7b875baaac523fcb17f08d97ff6dae2f8f3c2bec5e6d0f4ff365172f795fec12448a5ebe7e6b82c4e7a869d5c06392aa92595b6d7ca0e2fdd68c74532bb8a6851e411c0e01094487acad886d1db4fc73bf79fdc294cd07c840bdfce"], 0x2f, 0x0, &(0x7f00000000c0)="198a18e19dcb04d01be6f0b25f69e4dca5f36f78de0cc17fa9d3097db2059699f08814e7ba8f9edf9d37ea11b26fbd"}) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x4000000000000, 0x48a02) 17:26:39 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x20e, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}}, 0xc4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x40800) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x7, 0x1, 0x16}, @fda={0x66646185, 0x7, 0x0, 0x20}, @fda={0x66646185, 0xa, 0x1, 0x1e}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}], 0x6f, 0x0, &(0x7f0000000240)="3d68b254cc39293724e3da0236ea7854725cb667e7d6137b23c713b835586ca43770bc18c4fb5f4c56207b8de3d04053244b9c824b3d91a1fc40ff8646ef3cdf4c7c079efa0a71db43288e903934c91c60a1bddcb502e654889f2a7e056603f9dd7f3cdec14b0b4b8aa46c6573125a"}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) r7 = accept4$unix(r6, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e, 0x0) accept4$unix(r7, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x800) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000300)={0x1, 0x6, "0ba729", 0x20, 0x4}) 17:26:39 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x6) 17:26:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 17:26:39 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x4000000000000, 0x48a02) 17:26:39 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x4000000000000, 0x48a02) 17:26:39 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @any, 0xd2}, 0xe) 17:26:39 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc00, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f500c400100000000000000000000000c6311000c6300000963504000000b08540000000000000000000000000700002688db9ca413df145995905a66f11f2c2fac6bc7b875baaac523fcb17f08d97ff6dae2f8f3c2bec5e6d0f4ff365172f795fec12448a5ebe7e6b82c4e7a869d5c06392aa92595b6d7ca0e2fdd68c74532bb8a6851e411c0e01094487acad886d1db4fc73bf79fdc294cd07c840bdfce"], 0x2f, 0x0, &(0x7f00000000c0)="198a18e19dcb04d01be6f0b25f69e4dca5f36f78de0cc17fa9d3097db2059699f08814e7ba8f9edf9d37ea11b26fbd"}) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc00, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f500c400100000000000000000000000c6311000c6300000963504000000b08540000000000000000000000000700002688db9ca413df145995905a66f11f2c2fac6bc7b875baaac523fcb17f08d97ff6dae2f8f3c2bec5e6d0f4ff365172f795fec12448a5ebe7e6b82c4e7a869d5c06392aa92595b6d7ca0e2fdd68c74532bb8a6851e411c0e01094487acad886d1db4fc73bf79fdc294cd07c840bdfce"], 0x2f, 0x0, &(0x7f00000000c0)="198a18e19dcb04d01be6f0b25f69e4dca5f36f78de0cc17fa9d3097db2059699f08814e7ba8f9edf9d37ea11b26fbd"}) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x140d, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c04aaaa00"], 0xfffffdef) 17:26:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x140d, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x140d, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:39 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x6) 17:26:39 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @any, 0xd2}, 0xe) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x20e, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}}, 0xc4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x40800) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x7, 0x1, 0x16}, @fda={0x66646185, 0x7, 0x0, 0x20}, @fda={0x66646185, 0xa, 0x1, 0x1e}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}], 0x6f, 0x0, &(0x7f0000000240)="3d68b254cc39293724e3da0236ea7854725cb667e7d6137b23c713b835586ca43770bc18c4fb5f4c56207b8de3d04053244b9c824b3d91a1fc40ff8646ef3cdf4c7c079efa0a71db43288e903934c91c60a1bddcb502e654889f2a7e056603f9dd7f3cdec14b0b4b8aa46c6573125a"}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) r7 = accept4$unix(r6, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e, 0x0) accept4$unix(r7, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x800) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000300)={0x1, 0x6, "0ba729", 0x20, 0x4}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x20e, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}}, 0xc4) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x40800) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1000) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x7, 0x1, 0x16}, @fda={0x66646185, 0x7, 0x0, 0x20}, @fda={0x66646185, 0xa, 0x1, 0x1e}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}], 0x6f, 0x0, &(0x7f0000000240)="3d68b254cc39293724e3da0236ea7854725cb667e7d6137b23c713b835586ca43770bc18c4fb5f4c56207b8de3d04053244b9c824b3d91a1fc40ff8646ef3cdf4c7c079efa0a71db43288e903934c91c60a1bddcb502e654889f2a7e056603f9dd7f3cdec14b0b4b8aa46c6573125a"}) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) (async) accept4$unix(r6, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e, 0x0) (async) accept4$unix(r7, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x800) (async) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000300)={0x1, 0x6, "0ba729", 0x20, 0x4}) (async) 17:26:39 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c04aaaa00"], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c04aaaa00"], 0xfffffdef) (async) 17:26:39 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @any, 0xd2}, 0xe) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @any, 0xd2}, 0xe) (async) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 17:26:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x140d, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (rerun: 64) 17:26:39 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x20e, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}}, 0xc4) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x40800) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1000) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x7, 0x1, 0x16}, @fda={0x66646185, 0x7, 0x0, 0x20}, @fda={0x66646185, 0xa, 0x1, 0x1e}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}], 0x6f, 0x0, &(0x7f0000000240)="3d68b254cc39293724e3da0236ea7854725cb667e7d6137b23c713b835586ca43770bc18c4fb5f4c56207b8de3d04053244b9c824b3d91a1fc40ff8646ef3cdf4c7c079efa0a71db43288e903934c91c60a1bddcb502e654889f2a7e056603f9dd7f3cdec14b0b4b8aa46c6573125a"}) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) (async) r7 = accept4$unix(r6, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e, 0x0) accept4$unix(r7, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x800) (async) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000300)={0x1, 0x6, "0ba729", 0x20, 0x4}) 17:26:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)=0x3) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r0}) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000180)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="2b5327b686239e33f935515b7f242e1f138bb38d524d99c723f894bc1f2f2713cce5407a0df08439ffcbfe6aa9b37154f79369463e7b0494c6593e78731535fca4b91b337502888d9872b9bdfc152f31e9f524dfcc3b9bfaf26afbc6258661cb0a8b6a8666dc6a60e48ed3922e392511502ef49febbcf503a7648d3cd0ef6da9ccf63626d8652f72f161ba5fc19e3a86f0a2327e7a5fe2f92c484ad9d991ebaf92384794bddf5cc0b4b36a05243b8a775ac32541e6ccef574830c850db59400a28d674", 0xc3}, {&(0x7f0000000340)="a460da4ace605e5514f6565e48331fab6fef5487ce2cafac030c90cccd7d18ff1eb9bf90b4aef3ae756a03adde1bb5c283c664529559110ac6b330e1f8cff84d42cbe537c83e632f0fcdda7e716f42a226f9acaa8f4e3d9d6ac3048eb50e26170ff75f680f0e8a8d718a185d0dd85f7a8f079d004c114095c08d07144528e425e327", 0x82}], 0x2, &(0x7f0000000440)=[{0x18, 0x6, 0x5, "ead3b340fce8"}], 0x18}, 0x85) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000040)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@any, 0x8}}}, 0xb) 17:26:39 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x1}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x140d, 0x100, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x44810}, 0x4000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="10000000de898ca5f630a84a8b3a7d0c0500f1ff80000000000000016bd10475"], 0x10}, 0x1, 0x0, 0x0, 0x4048094}, 0x8000) 17:26:39 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c04aaaa00"], 0xfffffdef) 17:26:39 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0101000000"], 0x6) 17:26:39 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)=0x3) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r0}) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000180)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="2b5327b686239e33f935515b7f242e1f138bb38d524d99c723f894bc1f2f2713cce5407a0df08439ffcbfe6aa9b37154f79369463e7b0494c6593e78731535fca4b91b337502888d9872b9bdfc152f31e9f524dfcc3b9bfaf26afbc6258661cb0a8b6a8666dc6a60e48ed3922e392511502ef49febbcf503a7648d3cd0ef6da9ccf63626d8652f72f161ba5fc19e3a86f0a2327e7a5fe2f92c484ad9d991ebaf92384794bddf5cc0b4b36a05243b8a775ac32541e6ccef574830c850db59400a28d674", 0xc3}, {&(0x7f0000000340)="a460da4ace605e5514f6565e48331fab6fef5487ce2cafac030c90cccd7d18ff1eb9bf90b4aef3ae756a03adde1bb5c283c664529559110ac6b330e1f8cff84d42cbe537c83e632f0fcdda7e716f42a226f9acaa8f4e3d9d6ac3048eb50e26170ff75f680f0e8a8d718a185d0dd85f7a8f079d004c114095c08d07144528e425e327", 0x82}], 0x2, &(0x7f0000000440)=[{0x18, 0x6, 0x5, "ead3b340fce8"}], 0x18}, 0x85) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r3, &(0x7f0000000040)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@any, 0x8}}}, 0xb) 17:26:39 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x1}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x140d, 0x100, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x44810}, 0x4000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="10000000de898ca5f630a84a8b3a7d0c0500f1ff80000000000000016bd10475"], 0x10}, 0x1, 0x0, 0x0, 0x4048094}, 0x8000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x1}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x140d, 0x100, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x44810}, 0x4000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="10000000de898ca5f630a84a8b3a7d0c0500f1ff80000000000000016bd10475"], 0x10}, 0x1, 0x0, 0x0, 0x4048094}, 0x8000) (async) 17:26:39 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 17:26:40 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) accept4$unix(r0, 0x0, &(0x7f0000000000), 0x80000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000400000000000000"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) socketpair(0xf, 0x1, 0xc6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000400)=0x20) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1412, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20020000}, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000080)}, 0x10) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000340)=""/186) 17:26:40 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)=0x3) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r0}) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000180)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="2b5327b686239e33f935515b7f242e1f138bb38d524d99c723f894bc1f2f2713cce5407a0df08439ffcbfe6aa9b37154f79369463e7b0494c6593e78731535fca4b91b337502888d9872b9bdfc152f31e9f524dfcc3b9bfaf26afbc6258661cb0a8b6a8666dc6a60e48ed3922e392511502ef49febbcf503a7648d3cd0ef6da9ccf63626d8652f72f161ba5fc19e3a86f0a2327e7a5fe2f92c484ad9d991ebaf92384794bddf5cc0b4b36a05243b8a775ac32541e6ccef574830c850db59400a28d674", 0xc3}, {&(0x7f0000000340)="a460da4ace605e5514f6565e48331fab6fef5487ce2cafac030c90cccd7d18ff1eb9bf90b4aef3ae756a03adde1bb5c283c664529559110ac6b330e1f8cff84d42cbe537c83e632f0fcdda7e716f42a226f9acaa8f4e3d9d6ac3048eb50e26170ff75f680f0e8a8d718a185d0dd85f7a8f079d004c114095c08d07144528e425e327", 0x82}], 0x2, &(0x7f0000000440)=[{0x18, 0x6, 0x5, "ead3b340fce8"}], 0x18}, 0x85) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r3, &(0x7f0000000040)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@any, 0x8}}}, 0xb) 17:26:40 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async, rerun: 64) bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x1}, 0x20) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x140d, 0x100, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x44810}, 0x4000) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="10000000de898ca5f630a84a8b3a7d0c0500f1ff80000000000000016bd10475"], 0x10}, 0x1, 0x0, 0x0, 0x4048094}, 0x8000) 17:26:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0101000000"], 0x6) 17:26:40 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:40 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6) 17:26:40 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) accept4$unix(r0, 0x0, &(0x7f0000000000), 0x80000) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000400000000000000"], 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) socketpair(0xf, 0x1, 0xc6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000400)=0x20) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1412, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20020000}, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000080)}, 0x10) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000340)=""/186) 17:26:40 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x140f, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040d0}, 0xc001) 17:26:40 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x0) 17:26:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0101000000"], 0x6) 17:26:40 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6) 17:26:40 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="c44c3b875afe35e06993770ef75815bf9429e42b42b7c717fcd43c29897b475aa3e6b0508462ba8265cddf82c68a67ea432a4c4269af008557b3841e3e83846d00653b63254916a436b3c7541d13f35ab2d58ceedd7f9de6cbd472080a3c3fb6d235a605344bca30af387f4ed7bf937435dbd64051941fa367fd4fad5349b1dab770e9da72414a985a860ba1de51e1730edc6ceb880ef3759443b056c791e8ebbcc679ab73d4a4d4b9d3") 17:26:40 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) accept4$unix(r0, 0x0, &(0x7f0000000000), 0x80000) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000400000000000000"], 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) socketpair(0xf, 0x1, 0xc6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000400)=0x20) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1412, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20020000}, 0x1) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000080)}, 0x10) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000340)=""/186) 17:26:40 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6) 17:26:40 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="c44c3b875afe35e06993770ef75815bf9429e42b42b7c717fcd43c29897b475aa3e6b0508462ba8265cddf82c68a67ea432a4c4269af008557b3841e3e83846d00653b63254916a436b3c7541d13f35ab2d58ceedd7f9de6cbd472080a3c3fb6d235a605344bca30af387f4ed7bf937435dbd64051941fa367fd4fad5349b1dab770e9da72414a985a860ba1de51e1730edc6ceb880ef3759443b056c791e8ebbcc679ab73d4a4d4b9d3") 17:26:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc9, 0x6, 0x9, 0x1, 0x80, 0x4, 0x6}}}, 0x12) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000080)="f20b5769ab477327afc554819d951843e3a0e5898c780abec0d1404713b09e6684a698711a803eb9943f6987b6b4b84f36f091a97c27832ed548d856a7b3db79d63a1c2002ba4378e243a07d6513e1f014a64c5e8c171cc00a1e19b007e7144e557029e7d0ce2502d1f1ef7d5daa86c1ba11c399aba014f414") 17:26:40 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x140f, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040d0}, 0xc001) 17:26:40 executing program 1: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x800, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01862400000000000000"], 0xfffffdef) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) 17:26:40 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="c44c3b875afe35e06993770ef75815bf9429e42b42b7c717fcd43c29897b475aa3e6b0508462ba8265cddf82c68a67ea432a4c4269af008557b3841e3e83846d00653b63254916a436b3c7541d13f35ab2d58ceedd7f9de6cbd472080a3c3fb6d235a605344bca30af387f4ed7bf937435dbd64051941fa367fd4fad5349b1dab770e9da72414a985a860ba1de51e1730edc6ceb880ef3759443b056c791e8ebbcc679ab73d4a4d4b9d3") syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="c44c3b875afe35e06993770ef75815bf9429e42b42b7c717fcd43c29897b475aa3e6b0508462ba8265cddf82c68a67ea432a4c4269af008557b3841e3e83846d00653b63254916a436b3c7541d13f35ab2d58ceedd7f9de6cbd472080a3c3fb6d235a605344bca30af387f4ed7bf937435dbd64051941fa367fd4fad5349b1dab770e9da72414a985a860ba1de51e1730edc6ceb880ef3759443b056c791e8ebbcc679ab73d4a4d4b9d3") (async) 17:26:40 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x0) 17:26:40 executing program 1: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x800, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01862400000000000000"], 0xfffffdef) (async) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) 17:26:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc9, 0x6, 0x9, 0x1, 0x80, 0x4, 0x6}}}, 0x12) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000080)="f20b5769ab477327afc554819d951843e3a0e5898c780abec0d1404713b09e6684a698711a803eb9943f6987b6b4b84f36f091a97c27832ed548d856a7b3db79d63a1c2002ba4378e243a07d6513e1f014a64c5e8c171cc00a1e19b007e7144e557029e7d0ce2502d1f1ef7d5daa86c1ba11c399aba014f414") 17:26:40 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:40 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x0) 17:26:40 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x8001, 0x101, 0x3, 0xff, 0x9, 0x5, 0x8000}, 0xc) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:40 executing program 1: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x800, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01862400000000000000"], 0xfffffdef) (async) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) 17:26:40 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01aa0000000000000000de83583d979870ad835e236547"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0xa7, 0x501500) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040880}, 0x10) 17:26:40 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}}}, 0x6) 17:26:41 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x140f, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040d0}, 0xc001) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x140f, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040d0}, 0xc001) (async) 17:26:41 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:41 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x8001, 0x101, 0x3, 0xff, 0x9, 0x5, 0x8000}, 0xc) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x8001, 0x101, 0x3, 0xff, 0x9, 0x5, 0x8000}, 0xc) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc9, 0x6, 0x9, 0x1, 0x80, 0x4, 0x6}}}, 0x12) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000080)="f20b5769ab477327afc554819d951843e3a0e5898c780abec0d1404713b09e6684a698711a803eb9943f6987b6b4b84f36f091a97c27832ed548d856a7b3db79d63a1c2002ba4378e243a07d6513e1f014a64c5e8c171cc00a1e19b007e7144e557029e7d0ce2502d1f1ef7d5daa86c1ba11c399aba014f414") 17:26:41 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}}}, 0x6) 17:26:41 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01aa0000000000000000de83583d979870ad835e236547"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0xa7, 0x501500) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040880}, 0x10) 17:26:41 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000140)={0x1, @le_set_ext_adv_enable={{0x2039, 0xfa}, {0xad, 0x0, "bab68ef2feb9360254ebeec503a8907091b62ba7e5fc24e18e6a48b6ef895e9ceb933b09d2a51dcce991586843ccc3dcae829a3d45a57265e52f1fca901539f6903a5323e65ca562ad6a712497acb0e78913a285bd106913075686aa2052f749bdac1f0b7706064cc1afb4aeb56099b23545a98963d14d6ed465af2f5817595e55422635aa336f2054ead40e6376b042fd8eba94bd7c2a3b3987ba02a27f65ad50e86ceabfa5ac2ff9a696ce8849230e18c224184dd01418cf46b08b168287d68a1308954c486d9674b9f083ed1c1741c881f293dc65caff2cd79cc9dd5ddefca71518037a300f7a3d8ca14326b12a568543a785718644c2"}}}, 0xfe) 17:26:41 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01aa0000000000000000de83583d979870ad835e236547"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0xa7, 0x501500) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040880}, 0x10) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01aa0000000000000000de83583d979870ad835e236547"], 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0xa7, 0x501500) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040880}, 0x10) (async) 17:26:41 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x8001, 0x101, 0x3, 0xff, 0x9, 0x5, 0x8000}, 0xc) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x8001, 0x101, 0x3, 0xff, 0x9, 0x5, 0x8000}, 0xc) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) 17:26:41 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xd6, 0x800) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01051402c844"], 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x3f, 0x4) 17:26:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4c000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000f7fddf250400000008002c0001000100050033000100000061b52800c860bf74af1bb9530000000008002cf781230000"], 0x3c}}, 0x4008880) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r2}) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x1409, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0x2, 0x2}, 0xc) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xd6, 0x800) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01051402c844"], 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x3f, 0x4) syz_open_dev$vcsu(&(0x7f00000000c0), 0xd6, 0x800) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01051402c844"], 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x3f, 0x4) (async) 17:26:41 executing program 3: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}}}, 0x6) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xd6, 0x800) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01051402c844"], 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x3f, 0x4) syz_open_dev$vcsu(&(0x7f00000000c0), 0xd6, 0x800) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01051402c844"], 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x3f, 0x4) (async) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_create_conn={{}, {0x6ec0, 0x8, 0x1, 0x1f, @none, 0x61, 0x3a9, 0x7, 0x40, 0x5123, 0x1, 0xffc0}}}, 0xffffffffffffff38) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:41 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4c000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000f7fddf250400000008002c0001000100050033000100000061b52800c860bf74af1bb9530000000008002cf781230000"], 0x3c}}, 0x4008880) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r2}) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x1409, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0x2, 0x2}, 0xc) 17:26:41 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000140)={0x1, @le_set_ext_adv_enable={{0x2039, 0xfa}, {0xad, 0x0, "bab68ef2feb9360254ebeec503a8907091b62ba7e5fc24e18e6a48b6ef895e9ceb933b09d2a51dcce991586843ccc3dcae829a3d45a57265e52f1fca901539f6903a5323e65ca562ad6a712497acb0e78913a285bd106913075686aa2052f749bdac1f0b7706064cc1afb4aeb56099b23545a98963d14d6ed465af2f5817595e55422635aa336f2054ead40e6376b042fd8eba94bd7c2a3b3987ba02a27f65ad50e86ceabfa5ac2ff9a696ce8849230e18c224184dd01418cf46b08b168287d68a1308954c486d9674b9f083ed1c1741c881f293dc65caff2cd79cc9dd5ddefca71518037a300f7a3d8ca14326b12a568543a785718644c2"}}}, 0xfe) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000140)={0x1, @le_set_ext_adv_enable={{0x2039, 0xfa}, {0xad, 0x0, "bab68ef2feb9360254ebeec503a8907091b62ba7e5fc24e18e6a48b6ef895e9ceb933b09d2a51dcce991586843ccc3dcae829a3d45a57265e52f1fca901539f6903a5323e65ca562ad6a712497acb0e78913a285bd106913075686aa2052f749bdac1f0b7706064cc1afb4aeb56099b23545a98963d14d6ed465af2f5817595e55422635aa336f2054ead40e6376b042fd8eba94bd7c2a3b3987ba02a27f65ad50e86ceabfa5ac2ff9a696ce8849230e18c224184dd01418cf46b08b168287d68a1308954c486d9674b9f083ed1c1741c881f293dc65caff2cd79cc9dd5ddefca71518037a300f7a3d8ca14326b12a568543a785718644c2"}}}, 0xfe) (async) 17:26:41 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x0, 0x0, 0x1}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c09000000aaaaaa1b01070000000000006acf03420e4cd2697ed28a4394df2d3a0ce30000000000000000960dd92b1b1056ef7fd85a1be78d071791938046d64d65e28fc4e49822ed4ad1dbe7d7cdaeb531b58f58593131f6b498e1454cffdb78b9e2ff78c73f2b"], 0xfffffdef) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_create_conn={{}, {0x6ec0, 0x8, 0x1, 0x1f, @none, 0x61, 0x3a9, 0x7, 0x40, 0x5123, 0x1, 0xffc0}}}, 0xffffffffffffff38) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_create_conn={{}, {0x6ec0, 0x8, 0x1, 0x1f, @none, 0x61, 0x3a9, 0x7, 0x40, 0x5123, 0x1, 0xffc0}}}, 0xffffffffffffff38) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) 17:26:41 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x6) 17:26:41 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000140)={0x1, @le_set_ext_adv_enable={{0x2039, 0xfa}, {0xad, 0x0, "bab68ef2feb9360254ebeec503a8907091b62ba7e5fc24e18e6a48b6ef895e9ceb933b09d2a51dcce991586843ccc3dcae829a3d45a57265e52f1fca901539f6903a5323e65ca562ad6a712497acb0e78913a285bd106913075686aa2052f749bdac1f0b7706064cc1afb4aeb56099b23545a98963d14d6ed465af2f5817595e55422635aa336f2054ead40e6376b042fd8eba94bd7c2a3b3987ba02a27f65ad50e86ceabfa5ac2ff9a696ce8849230e18c224184dd01418cf46b08b168287d68a1308954c486d9674b9f083ed1c1741c881f293dc65caff2cd79cc9dd5ddefca71518037a300f7a3d8ca14326b12a568543a785718644c2"}}}, 0xfe) 17:26:41 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x0, 0x0, 0x1}) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c09000000aaaaaa1b01070000000000006acf03420e4cd2697ed28a4394df2d3a0ce30000000000000000960dd92b1b1056ef7fd85a1be78d071791938046d64d65e28fc4e49822ed4ad1dbe7d7cdaeb531b58f58593131f6b498e1454cffdb78b9e2ff78c73f2b"], 0xfffffdef) 17:26:41 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x6) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_create_conn={{}, {0x6ec0, 0x8, 0x1, 0x1f, @none, 0x61, 0x3a9, 0x7, 0x40, 0x5123, 0x1, 0xffc0}}}, 0xffffffffffffff38) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4c000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000f7fddf250400000008002c0001000100050033000100000061b52800c860bf74af1bb9530000000008002cf781230000"], 0x3c}}, 0x4008880) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r2}) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x1409, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0x2, 0x2}, 0xc) 17:26:41 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:41 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010a1405000000000082809a54ea4500d0ca5cc1518a8523f427c8091857a8ace5ff57381b5d037eabf89eca7779e09506ad8fc76a6490c154559dd1cdf43eaa57019f52539e13b39e75634363f97cb2b9583ab8fbce3b86aba1388ec3bdf5a64591ea64cd405b25f64bba4648aace52527d8368c0203db635a5bee8d17fc69d5581c353376b38fea10d15db27cfce0f6a536c5b9d44d0c769092a41486f92d8fc4782f699e65eea6373f4a326ac45c735528845d8d5ea596b"], 0x9) write$bt_hci(r0, &(0x7f0000000080)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7, 0x700c0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x4, 0x3, "f5370c", 0x6, 0x40}) 17:26:41 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x0, 0x0, 0x1}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c09000000aaaaaa1b01070000000000006acf03420e4cd2697ed28a4394df2d3a0ce30000000000000000960dd92b1b1056ef7fd85a1be78d071791938046d64d65e28fc4e49822ed4ad1dbe7d7cdaeb531b58f58593131f6b498e1454cffdb78b9e2ff78c73f2b"], 0xfffffdef) 17:26:41 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r1, 0x25, 0x16}, 0x10) 17:26:41 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x20, 0x40080) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8082000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x140b, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x40) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000200)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0xaaf7505ec7759856, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x20048001) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010c0406aa0300aaaa3f7250d9004d71cbc275905dcc5878aa5495b291345866d8223b1d4fb4d76eaeb17931265e2984739afc39abfa6fc41a86f6ad4d3276b7cc2e095a48c75123edacbcb8f72a8c17c42b546d93454c5efd9945835cc285504b36d809b4f32689050ef9a8dc4f012ae4a3b75562610128c4ee49f52bcef41c4c8b1363bfe1d178d4859e075631d332c1125bfe08dcb7c192545f9fc59d39227a23b6594e4da70569001e22f71852db03585dbc47e3638a8a2d83c19d0902ae582b04829573ffc17d16d4c850"], 0xfffffdef) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7, 0x700c0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x4, 0x3, "f5370c", 0x6, 0x40}) 17:26:41 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, 0x0, 0x6) 17:26:41 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010a1405000000000082809a54ea4500d0ca5cc1518a8523f427c8091857a8ace5ff57381b5d037eabf89eca7779e09506ad8fc76a6490c154559dd1cdf43eaa57019f52539e13b39e75634363f97cb2b9583ab8fbce3b86aba1388ec3bdf5a64591ea64cd405b25f64bba4648aace52527d8368c0203db635a5bee8d17fc69d5581c353376b38fea10d15db27cfce0f6a536c5b9d44d0c769092a41486f92d8fc4782f699e65eea6373f4a326ac45c735528845d8d5ea596b"], 0x9) write$bt_hci(r0, &(0x7f0000000080)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010a1405000000000082809a54ea4500d0ca5cc1518a8523f427c8091857a8ace5ff57381b5d037eabf89eca7779e09506ad8fc76a6490c154559dd1cdf43eaa57019f52539e13b39e75634363f97cb2b9583ab8fbce3b86aba1388ec3bdf5a64591ea64cd405b25f64bba4648aace52527d8368c0203db635a5bee8d17fc69d5581c353376b38fea10d15db27cfce0f6a536c5b9d44d0c769092a41486f92d8fc4782f699e65eea6373f4a326ac45c735528845d8d5ea596b"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) (async) 17:26:41 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:41 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x20, 0x40080) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8082000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x140b, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x40) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000200)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0xaaf7505ec7759856, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x20048001) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010c0406aa0300aaaa3f7250d9004d71cbc275905dcc5878aa5495b291345866d8223b1d4fb4d76eaeb17931265e2984739afc39abfa6fc41a86f6ad4d3276b7cc2e095a48c75123edacbcb8f72a8c17c42b546d93454c5efd9945835cc285504b36d809b4f32689050ef9a8dc4f012ae4a3b75562610128c4ee49f52bcef41c4c8b1363bfe1d178d4859e075631d332c1125bfe08dcb7c192545f9fc59d39227a23b6594e4da70569001e22f71852db03585dbc47e3638a8a2d83c19d0902ae582b04829573ffc17d16d4c850"], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x20, 0x40080) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8082000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x140b, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x40) (async) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000200)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0xaaf7505ec7759856, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x20048001) (async) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010c0406aa0300aaaa3f7250d9004d71cbc275905dcc5878aa5495b291345866d8223b1d4fb4d76eaeb17931265e2984739afc39abfa6fc41a86f6ad4d3276b7cc2e095a48c75123edacbcb8f72a8c17c42b546d93454c5efd9945835cc285504b36d809b4f32689050ef9a8dc4f012ae4a3b75562610128c4ee49f52bcef41c4c8b1363bfe1d178d4859e075631d332c1125bfe08dcb7c192545f9fc59d39227a23b6594e4da70569001e22f71852db03585dbc47e3638a8a2d83c19d0902ae582b04829573ffc17d16d4c850"], 0xfffffdef) (async) 17:26:41 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010a1405000000000082809a54ea4500d0ca5cc1518a8523f427c8091857a8ace5ff57381b5d037eabf89eca7779e09506ad8fc76a6490c154559dd1cdf43eaa57019f52539e13b39e75634363f97cb2b9583ab8fbce3b86aba1388ec3bdf5a64591ea64cd405b25f64bba4648aace52527d8368c0203db635a5bee8d17fc69d5581c353376b38fea10d15db27cfce0f6a536c5b9d44d0c769092a41486f92d8fc4782f699e65eea6373f4a326ac45c735528845d8d5ea596b"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) 17:26:41 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:41 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7, 0x700c0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x4, 0x3, "f5370c", 0x6, 0x40}) 17:26:41 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r1, 0x25, 0x16}, 0x10) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r1, 0x25, 0x16}, 0x10) (async) 17:26:41 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675"], 0x6) 17:26:41 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x20, 0x40080) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8082000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x140b, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x40) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000200)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0xaaf7505ec7759856, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x20048001) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010c0406aa0300aaaa3f7250d9004d71cbc275905dcc5878aa5495b291345866d8223b1d4fb4d76eaeb17931265e2984739afc39abfa6fc41a86f6ad4d3276b7cc2e095a48c75123edacbcb8f72a8c17c42b546d93454c5efd9945835cc285504b36d809b4f32689050ef9a8dc4f012ae4a3b75562610128c4ee49f52bcef41c4c8b1363bfe1d178d4859e075631d332c1125bfe08dcb7c192545f9fc59d39227a23b6594e4da70569001e22f71852db03585dbc47e3638a8a2d83c19d0902ae582b04829573ffc17d16d4c850"], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x20, 0x40080) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8082000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x140b, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x40) (async) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000200)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0xaaf7505ec7759856, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x20048001) (async) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010c0406aa0300aaaa3f7250d9004d71cbc275905dcc5878aa5495b291345866d8223b1d4fb4d76eaeb17931265e2984739afc39abfa6fc41a86f6ad4d3276b7cc2e095a48c75123edacbcb8f72a8c17c42b546d93454c5efd9945835cc285504b36d809b4f32689050ef9a8dc4f012ae4a3b75562610128c4ee49f52bcef41c4c8b1363bfe1d178d4859e075631d332c1125bfe08dcb7c192545f9fc59d39227a23b6594e4da70569001e22f71852db03585dbc47e3638a8a2d83c19d0902ae582b04829573ffc17d16d4c850"], 0xfffffdef) (async) 17:26:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 17:26:41 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000090) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:41 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:41 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r1, 0x25, 0x16}, 0x10) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r1, 0x25, 0x16}, 0x10) (async) 17:26:42 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x4}, 0x20) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x5, &(0x7f0000000480)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x100}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x66}], &(0x7f00000004c0)='GPL\x00', 0x7fff, 0x80, &(0x7f0000000500)=""/128, 0x41000, 0x20, '\x00', 0x0, 0x1f, r1, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x0, 0xb16, 0x3}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000600)=[r1, r0, r0, r1, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0x6a, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x18}, 0x1, 0x0, 0x0, 0x18000020}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x140f, 0x4, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x2c}}, 0x48000) r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x105080) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000140)) 17:26:42 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000000, 0x48a02) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x4000) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140d, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x80) 17:26:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:42 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000090) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000090) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:42 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) (async) 17:26:42 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000000, 0x48a02) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x4000) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140d, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x80) syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000000, 0x48a02) (async) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x4000) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140d, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x80) (async) 17:26:42 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:42 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000000, 0x48a02) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x4000) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140d, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x80) syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000000, 0x48a02) (async) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x4000) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140d, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x80) (async) 17:26:42 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:42 executing program 3: write$bt_hci(0xffffffffffffffff, 0x0, 0x6) 17:26:42 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000090) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:42 executing program 3: write$bt_hci(0xffffffffffffffff, 0x0, 0x6) 17:26:42 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x4}, 0x20) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x5, &(0x7f0000000480)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x100}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x66}], &(0x7f00000004c0)='GPL\x00', 0x7fff, 0x80, &(0x7f0000000500)=""/128, 0x41000, 0x20, '\x00', 0x0, 0x1f, r1, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x0, 0xb16, 0x3}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000600)=[r1, r0, r0, r1, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0x6a, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x18}, 0x1, 0x0, 0x0, 0x18000020}, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x140f, 0x4, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x2c}}, 0x48000) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x105080) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000140)) 17:26:42 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:42 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) 17:26:42 executing program 3: write$bt_hci(0xffffffffffffffff, 0x0, 0x6) 17:26:42 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 17:26:42 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:42 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:42 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x4}, 0x20) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x5, &(0x7f0000000480)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x100}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x66}], &(0x7f00000004c0)='GPL\x00', 0x7fff, 0x80, &(0x7f0000000500)=""/128, 0x41000, 0x20, '\x00', 0x0, 0x1f, r1, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x0, 0xb16, 0x3}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000600)=[r1, r0, r0, r1, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0x6a, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x18}, 0x1, 0x0, 0x0, 0x18000020}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x140f, 0x4, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x2c}}, 0x48000) r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x105080) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000140)) 17:26:42 executing program 3: r0 = syz_open_dev$vcsu(0x0, 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:42 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a14070000000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000140)="30a32ed5f7094a2dca1417a4d8a012121f155931ea5b5d835ca70ba318f04956b28e77548e8b8f1e5a4770c34699f465bc1b3af56e3fca8dd7d31c3198cf1ab32bf49140a3b8f2d6f16abfb653da5bfb28ce05be8a825f4e2bb9360ee4b108707f72c8a1a29c8e8c0413a8636fac6447b8d222e84017053ff6e4ac734b385f2d2cea6b0879aea32f34eae6c3a04818fff903523f7c1f3b7e66b575db8549351425b5be9e0e5084eeb43f6a442c2f55c4ba6f3b09c86fe685ac806caa67820b4bbfb3a0421356acfc41e30e5911ec4050f70b3aac94530593a017dc5fc2b6711261e71d122d") r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) 17:26:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x6) 17:26:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x6) 17:26:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x6) 17:26:42 executing program 5: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:42 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:42 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "04856ad8bdef4a6efba20ae965dfcc4c", "10d77d828d829d8feee42d44434ed6d0", "485da705d619fd69bc398f1f96e9971c", "7e035b30de4c79debb1c17caa2df98e4"}}}, 0x4a) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2542dcf59cd8cc70646f13e60572eab50580dd1bbed5185bb7cc4c27913c6318bdf78e5f9da56383559037c100d6a1288a7368", @ANYRES32=r0], 0x6) 17:26:42 executing program 1: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) 17:26:42 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) 17:26:42 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a14070000000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000140)="30a32ed5f7094a2dca1417a4d8a012121f155931ea5b5d835ca70ba318f04956b28e77548e8b8f1e5a4770c34699f465bc1b3af56e3fca8dd7d31c3198cf1ab32bf49140a3b8f2d6f16abfb653da5bfb28ce05be8a825f4e2bb9360ee4b108707f72c8a1a29c8e8c0413a8636fac6447b8d222e84017053ff6e4ac734b385f2d2cea6b0879aea32f34eae6c3a04818fff903523f7c1f3b7e66b575db8549351425b5be9e0e5084eeb43f6a442c2f55c4ba6f3b09c86fe685ac806caa67820b4bbfb3a0421356acfc41e30e5911ec4050f70b3aac94530593a017dc5fc2b6711261e71d122d") r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a14070000000000"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000140)="30a32ed5f7094a2dca1417a4d8a012121f155931ea5b5d835ca70ba318f04956b28e77548e8b8f1e5a4770c34699f465bc1b3af56e3fca8dd7d31c3198cf1ab32bf49140a3b8f2d6f16abfb653da5bfb28ce05be8a825f4e2bb9360ee4b108707f72c8a1a29c8e8c0413a8636fac6447b8d222e84017053ff6e4ac734b385f2d2cea6b0879aea32f34eae6c3a04818fff903523f7c1f3b7e66b575db8549351425b5be9e0e5084eeb43f6a442c2f55c4ba6f3b09c86fe685ac806caa67820b4bbfb3a0421356acfc41e30e5911ec4050f70b3aac94530593a017dc5fc2b6711261e71d122d") (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) (async) 17:26:42 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x40000) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffd8ef, @host}, 0x10) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 17:26:42 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "04856ad8bdef4a6efba20ae965dfcc4c", "10d77d828d829d8feee42d44434ed6d0", "485da705d619fd69bc398f1f96e9971c", "7e035b30de4c79debb1c17caa2df98e4"}}}, 0x4a) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2542dcf59cd8cc70646f13e60572eab50580dd1bbed5185bb7cc4c27913c6318bdf78e5f9da56383559037c100d6a1288a7368", @ANYRES32=r0], 0x6) 17:26:42 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) 17:26:42 executing program 1: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) 17:26:42 executing program 5: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:42 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x40000) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (rerun: 32) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffd8ef, @host}, 0x10) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 17:26:42 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) 17:26:42 executing program 1: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) 17:26:42 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a14070000000000"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000140)="30a32ed5f7094a2dca1417a4d8a012121f155931ea5b5d835ca70ba318f04956b28e77548e8b8f1e5a4770c34699f465bc1b3af56e3fca8dd7d31c3198cf1ab32bf49140a3b8f2d6f16abfb653da5bfb28ce05be8a825f4e2bb9360ee4b108707f72c8a1a29c8e8c0413a8636fac6447b8d222e84017053ff6e4ac734b385f2d2cea6b0879aea32f34eae6c3a04818fff903523f7c1f3b7e66b575db8549351425b5be9e0e5084eeb43f6a442c2f55c4ba6f3b09c86fe685ac806caa67820b4bbfb3a0421356acfc41e30e5911ec4050f70b3aac94530593a017dc5fc2b6711261e71d122d") (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) 17:26:42 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "04856ad8bdef4a6efba20ae965dfcc4c", "10d77d828d829d8feee42d44434ed6d0", "485da705d619fd69bc398f1f96e9971c", "7e035b30de4c79debb1c17caa2df98e4"}}}, 0x4a) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2542dcf59cd8cc70646f13e60572eab50580dd1bbed5185bb7cc4c27913c6318bdf78e5f9da56383559037c100d6a1288a7368", @ANYRES32=r0], 0x6) 17:26:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a41"], 0x6) 17:26:42 executing program 0: ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000080)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40d0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="070c046b2043400a6560"], 0xfffffdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:26:42 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x40000) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (rerun: 64) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffd8ef, @host}, 0x10) (async, rerun: 64) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (rerun: 64) 17:26:42 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x9, 0x109a02) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="010900000000000000005b378be01e2c00ff3dbff21ee51db866070cce794b083de379bde7dd43c78eb49ee9fc31ed4e7576365d5096fc9966f707f91df5f5"], 0xfffffdef) 17:26:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) (fail_nth: 1) 17:26:42 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x6) 17:26:42 executing program 5: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) [ 2327.129386][T14186] FAULT_INJECTION: forcing a failure. [ 2327.129386][T14186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2327.142487][T14186] CPU: 0 PID: 14186 Comm: syz-executor.3 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2327.153423][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2327.163598][T14186] Call Trace: [ 2327.166882][T14186] [ 2327.169810][T14186] dump_stack_lvl+0xd6/0x122 [ 2327.174418][T14186] dump_stack+0x11/0x12 17:26:42 executing program 0: ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000080)=0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) (rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40d0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="070c046b2043400a6560"], 0xfffffdef) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2327.178649][T14186] should_fail+0x242/0x250 [ 2327.183097][T14186] should_fail_usercopy+0x16/0x20 [ 2327.188131][T14186] _copy_to_user+0x1a/0x90 [ 2327.192615][T14186] simple_read_from_buffer+0xab/0x120 [ 2327.198011][T14186] proc_fail_nth_read+0x10d/0x150 [ 2327.203047][T14186] ? proc_fault_inject_write+0x230/0x230 [ 2327.208708][T14186] vfs_read+0x198/0x560 [ 2327.212913][T14186] ? __fget_files+0x1a7/0x1e0 [ 2327.217612][T14186] ksys_read+0xe8/0x1a0 [ 2327.221759][T14186] __x64_sys_read+0x3e/0x50 [ 2327.226262][T14186] do_syscall_64+0x2b/0x70 [ 2327.230706][T14186] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2327.236689][T14186] RIP: 0033:0x7ffb55f82e2c [ 2327.241172][T14186] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2327.260812][T14186] RSP: 002b:00007ffb55725160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2327.269333][T14186] RAX: ffffffffffffffda RBX: 00007ffb560e3050 RCX: 00007ffb55f82e2c 17:26:42 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x20) 17:26:42 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (fail_nth: 1) 17:26:42 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x6) (async) 17:26:42 executing program 0: ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000080)=0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40d0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="070c046b2043400a6560"], 0xfffffdef) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2327.277334][T14186] RDX: 000000000000000f RSI: 00007ffb557251e0 RDI: 0000000000000004 [ 2327.285294][T14186] RBP: 00007ffb557251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2327.293327][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2327.301368][T14186] R13: 00007ffcc0aec98f R14: 00007ffb55725300 R15: 0000000000022000 [ 2327.309473][T14186] 17:26:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:42 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x9, 0x109a02) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="010900000000000000005b378be01e2c00ff3dbff21ee51db866070cce794b083de379bde7dd43c78eb49ee9fc31ed4e7576365d5096fc9966f707f91df5f5"], 0xfffffdef) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x9, 0x109a02) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="010900000000000000005b378be01e2c00ff3dbff21ee51db866070cce794b083de379bde7dd43c78eb49ee9fc31ed4e7576365d5096fc9966f707f91df5f5"], 0xfffffdef) (async) 17:26:43 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x6) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, 0x0, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x1, 0x101, "35768b", 0xff, 0x81}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0xb, &(0x7f0000000140)='/dev/vcsu#\x00'}, 0x30) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x804) socket$l2tp6(0xa, 0x2, 0x73) 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x20) 17:26:43 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (fail_nth: 2) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, 0x0, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x1, 0x101, "35768b", 0xff, 0x81}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0xb, &(0x7f0000000140)='/dev/vcsu#\x00'}, 0x30) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x804) socket$l2tp6(0xa, 0x2, 0x73) 17:26:43 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x9, 0x109a02) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="010900000000000000005b378be01e2c00ff3dbff21ee51db866070cce794b083de379bde7dd43c78eb49ee9fc31ed4e7576365d5096fc9966f707f91df5f5"], 0xfffffdef) 17:26:43 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0x1, 0xfffff5cf, 0x1, r0, 0x1, '\x00', 0x0, r0, 0x0, 0x2, 0x4, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x2, 0x1, 0x0, 0x60, 0x1, 0x3, '\x00', 0x0, r0, 0x5, 0x3, 0x4}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8, 0x4, 0x9f37, 0x1010, r0, 0x400, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6b}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x34, &(0x7f0000000180)=""/52, 0x41000, 0x17, '\x00', r2, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xb, 0x8, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r3, r0, r0, r0, r4, r5]}, 0x80) socketpair(0x3f, 0x80000, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r6, &(0x7f0000000500)={0x1, @switch_role={{0x80b, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}}}, 0xb) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, 0x0, 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x1, 0x101, "35768b", 0xff, 0x81}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0xb, &(0x7f0000000140)='/dev/vcsu#\x00'}, 0x30) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x804) (async) socket$l2tp6(0xa, 0x2, 0x73) [ 2327.567957][T14239] FAULT_INJECTION: forcing a failure. [ 2327.567957][T14239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2327.581065][T14239] CPU: 0 PID: 14239 Comm: syz-executor.5 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2327.592013][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2327.602147][T14239] Call Trace: [ 2327.605473][T14239] [ 2327.608407][T14239] dump_stack_lvl+0xd6/0x122 [ 2327.613096][T14239] dump_stack+0x11/0x12 [ 2327.617309][T14239] should_fail+0x242/0x250 [ 2327.621733][T14239] should_fail_usercopy+0x16/0x20 [ 2327.626783][T14239] _copy_from_user+0x1a/0xc0 [ 2327.631392][T14239] kstrtouint_from_user+0x81/0xf0 [ 2327.636448][T14239] proc_fail_nth_write+0x4b/0x150 [ 2327.641483][T14239] ? proc_fail_nth_read+0x150/0x150 [ 2327.646715][T14239] vfs_write+0x25c/0x760 [ 2327.650961][T14239] ? __fget_files+0x1a7/0x1e0 [ 2327.655639][T14239] ksys_write+0xe8/0x1a0 [ 2327.659884][T14239] __x64_sys_write+0x3e/0x50 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x20) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x791, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) [ 2327.664541][T14239] do_syscall_64+0x2b/0x70 [ 2327.669053][T14239] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2327.674991][T14239] RIP: 0033:0x7fb6bdf41d8f [ 2327.679405][T14239] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2327.699051][T14239] RSP: 002b:00007fb6bd6e4160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2327.707528][T14239] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb6bdf41d8f 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) (async) 17:26:43 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000f1420032adbdf250800030000000000"], 0x18}, 0x1, 0x0, 0x0, 0x26000000}, 0x40) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x791, 0x109a02) write$bt_hci(r0, 0x0, 0x6) 17:26:43 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0x1, 0xfffff5cf, 0x1, r0, 0x1, '\x00', 0x0, r0, 0x0, 0x2, 0x4, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x2, 0x1, 0x0, 0x60, 0x1, 0x3, '\x00', 0x0, r0, 0x5, 0x3, 0x4}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8, 0x4, 0x9f37, 0x1010, r0, 0x400, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6b}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x34, &(0x7f0000000180)=""/52, 0x41000, 0x17, '\x00', r2, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xb, 0x8, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r3, r0, r0, r0, r4, r5]}, 0x80) socketpair(0x3f, 0x80000, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r6, &(0x7f0000000500)={0x1, @switch_role={{0x80b, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}}}, 0xb) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0x1, 0xfffff5cf, 0x1, r0, 0x1, '\x00', 0x0, r0, 0x0, 0x2, 0x4, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x2, 0x1, 0x0, 0x60, 0x1, 0x3, '\x00', 0x0, r0, 0x5, 0x3, 0x4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8, 0x4, 0x9f37, 0x1010, r0, 0x400, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6b}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x34, &(0x7f0000000180)=""/52, 0x41000, 0x17, '\x00', r2, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xb, 0x8, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r3, r0, r0, r0, r4, r5]}, 0x80) (async) socketpair(0x3f, 0x80000, 0x1ff, &(0x7f0000000000)) (async) write$bt_hci(r6, &(0x7f0000000500)={0x1, @switch_role={{0x80b, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}}}, 0xb) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:43 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) [ 2327.715511][T14239] RDX: 0000000000000001 RSI: 00007fb6bd6e41e0 RDI: 0000000000000004 [ 2327.723490][T14239] RBP: 00007fb6bd6e41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2327.731466][T14239] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2327.739470][T14239] R13: 00007ffcdd3b778f R14: 00007fb6bd6e4300 R15: 0000000000022000 [ 2327.747490][T14239] 17:26:43 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140b, 0x2, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0xc) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0xc002}, 0x4008001) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x1d, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40060}, 0x4000000) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x791, 0x109a02) write$bt_hci(r0, 0x0, 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x791, 0x109a02) (async) write$bt_hci(r0, 0x0, 0x6) (async) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) write$bt_hci(r0, 0x0, 0x6) 17:26:43 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0x1, 0xfffff5cf, 0x1, r0, 0x1, '\x00', 0x0, r0, 0x0, 0x2, 0x4, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x2, 0x1, 0x0, 0x60, 0x1, 0x3, '\x00', 0x0, r0, 0x5, 0x3, 0x4}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8, 0x4, 0x9f37, 0x1010, r0, 0x400, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6b}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x34, &(0x7f0000000180)=""/52, 0x41000, 0x17, '\x00', r2, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xb, 0x8, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r3, r0, r0, r0, r4, r5]}, 0x80) (async) socketpair(0x3f, 0x80000, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r6, &(0x7f0000000500)={0x1, @switch_role={{0x80b, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}}}, 0xb) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (rerun: 64) 17:26:43 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="31aab303"], 0x6) 17:26:43 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) write$bt_hci(r0, 0x0, 0x6) 17:26:43 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000f1420032adbdf250800030000000000"], 0x18}, 0x1, 0x0, 0x0, 0x26000000}, 0x40) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000f1420032adbdf250800030000000000"], 0x18}, 0x1, 0x0, 0x0, 0x26000000}, 0x40) (async) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) (async) 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1412, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x600088d4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140f, 0x104, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1410, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000010}, 0x820) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) [ 2327.872053][T14279] can: request_module (can-proto-4) failed. 17:26:43 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140b, 0x2, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0xc) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0xc002}, 0x4008001) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x1d, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40060}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140b, 0x2, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0xc) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0xc002}, 0x4008001) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socketpair(0x1d, 0x3, 0x4, &(0x7f00000003c0)) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40060}, 0x4000000) (async) 17:26:43 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000f1420032adbdf250800030000000000"], 0x18}, 0x1, 0x0, 0x0, 0x26000000}, 0x40) (async) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1412, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x600088d4) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140f, 0x104, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1410, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000010}, 0x820) (rerun: 64) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) 17:26:43 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) write$bt_hci(r0, 0x0, 0x6) 17:26:43 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x200) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0xfffffd56) 17:26:43 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="31aab303"], 0x6) [ 2327.998431][T14304] can: request_module (can-proto-4) failed. 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1412, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x600088d4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140f, 0x104, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1410, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000010}, 0x820) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1412, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x600088d4) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140f, 0x104, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1410, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000010}, 0x820) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) (async) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x200) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, 0x0, 0xfffffd56) 17:26:43 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x10001, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:43 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000340)="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", 0x104, 0x8000, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa0047c4da674c7ff85d75bac0ba3412321c216da40854156caab73ac96258e59ece76c000000000000000fcfad7cb6ef6752cccde7a1aaab285225853"], 0xfffffdef) 17:26:43 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140b, 0x2, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0xc) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0xc002}, 0x4008001) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x1d, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40060}, 0x4000000) 17:26:43 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x10001, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) syz_open_dev$vcsu(&(0x7f0000000000), 0x2000, 0x48a02) 17:26:43 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="31aab303"], 0x6) 17:26:43 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x200) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, 0x0, 0xfffffd56) 17:26:43 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000340)="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", 0x104, 0x8000, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa0047c4da674c7ff85d75bac0ba3412321c216da40854156caab73ac96258e59ece76c000000000000000fcfad7cb6ef6752cccde7a1aaab285225853"], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendto$unix(r0, &(0x7f0000000340)="5ed6021c2bed9ad719a5da4f8a94af69ee0fc325b3ad6f2a8a164689167b394ebfecdb5092a51b435cab11efd3e8ea67ac0b9b76d031ef62c5aad764f522d08744df4e64101a1007b9c55973f663761789ed14d1b5ec4656d5bfd4f3514eb8a4302f8825f2c6cfa345a45b0149353008b84d982749da9a2194b9a344cd85a0af8da908558c4ebbc2cf86fcb61a57dcf89053aae7e4601dc513e107ddf79101a71b463fe25c423223e2167ad67595598ed4bd80ba2243911a2d756a6721eca6dc982c983b0148e6eb2845889e90e616e607ff3e8123f2a70de9bf4f7e62c8fea47da3fe1bd5b20179c3e415386e304b9daf80b33bfa6735a560482a9b9b8f5332fe964f3b", 0x104, 0x8000, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa0047c4da674c7ff85d75bac0ba3412321c216da40854156caab73ac96258e59ece76c000000000000000fcfad7cb6ef6752cccde7a1aaab285225853"], 0xfffffdef) (async) 17:26:43 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x10001, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x2000, 0x48a02) 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x2000, 0x48a02) 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x2, "284781", 0x7f, 0x3f}) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x81, 0x232020) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) 17:26:43 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000500)=@raw=[@exit, @cb_func, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xa6}, @exit], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x9, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000001580)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xc, 0x100, 0x2}, 0x10, 0x14d46, r0, 0x0, &(0x7f0000001600)=[r0, r0, r0, r0, r0]}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a00)={0x184, 0x0, &(0x7f0000001780)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @free_buffer, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/173, 0xad, 0x2, 0x1f}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x2, 0x1, 0x8}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/100, 0x64, 0x1, 0x24}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/114, 0x72, 0x1, 0x36}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0x2, 0x2, 0x10}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000001740)={0x0, 0x20, 0x38}}, 0x1000}, @release={0x40046306, 0x3}], 0x88, 0x0, &(0x7f0000001940)="c8e76a57c444114ffb1fa243483c864aea6bd114c26b2a33b639b7f262b43c908e1ee51d5df9882d91cf780ce47f07be281642d7f711ffa132060dcb5ed2a6d2dffb9e55c319822a1ff3d07f62753bbdb88f562853dac1807b430bb04e6c9391b7b43ace5248ce5bd70b6adab960a7cd718b0c449051b7492af79de9864385b19367f2cf07487c3b"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001cc0)={'syztnl2\x00', &(0x7f0000001bc0)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x2, 0xfff, {{0x2a, 0x4, 0x1, 0x1a, 0xa8, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xfd, [@local]}, @noop, @lsrr={0x83, 0x17, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x16, 0x1, [{0x1, 0x10, "257e892750ca5e47b7e6f9f3b951"}]}, @timestamp_addr={0x44, 0x3c, 0xbd, 0x1, 0x2, [{@local, 0x3ff}, {@empty, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0x9}, {@loopback, 0xb94}, {@empty, 0x8}]}, @rr={0x7, 0x13, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x27}, @loopback]}, @ssrr={0x89, 0xb, 0x8f, [@private=0xa010100, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_tracing={0x1a, 0x7, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x430}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000001a80)='syzkaller\x00', 0x101, 0xde, &(0x7f0000001ac0)=""/222, 0x40f00, 0xb, '\x00', r3, 0x17, r0, 0x8, &(0x7f0000001d00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x6, 0xb, 0x7f, 0x6}, 0x10, 0xc126}, 0x80) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0166750100"], 0x6) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2328.316162][T14358] can: request_module (can-proto-4) failed. 17:26:43 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendto$unix(r0, &(0x7f0000000340)="5ed6021c2bed9ad719a5da4f8a94af69ee0fc325b3ad6f2a8a164689167b394ebfecdb5092a51b435cab11efd3e8ea67ac0b9b76d031ef62c5aad764f522d08744df4e64101a1007b9c55973f663761789ed14d1b5ec4656d5bfd4f3514eb8a4302f8825f2c6cfa345a45b0149353008b84d982749da9a2194b9a344cd85a0af8da908558c4ebbc2cf86fcb61a57dcf89053aae7e4601dc513e107ddf79101a71b463fe25c423223e2167ad67595598ed4bd80ba2243911a2d756a6721eca6dc982c983b0148e6eb2845889e90e616e607ff3e8123f2a70de9bf4f7e62c8fea47da3fe1bd5b20179c3e415386e304b9daf80b33bfa6735a560482a9b9b8f5332fe964f3b", 0x104, 0x8000, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaaaa0047c4da674c7ff85d75bac0ba3412321c216da40854156caab73ac96258e59ece76c000000000000000fcfad7cb6ef6752cccde7a1aaab285225853"], 0xfffffdef) 17:26:43 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_scan_enable={{}, {0x9, 0x2}}}, 0xa) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000200), 0xfff, 0x12082) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000240)={0x3, [0x7f], 0x3}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r7, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x48080) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xd}]}, 0x74}}, 0x1) 17:26:43 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xadc29b636baf58ed}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x1405, 0x100, 0x70bd25, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x5}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40040}, 0x4008000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004859}, 0x4008014) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, 0x0, 0x6) 17:26:43 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000500)=@raw=[@exit, @cb_func, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xa6}, @exit], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x9, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000001580)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xc, 0x100, 0x2}, 0x10, 0x14d46, r0, 0x0, &(0x7f0000001600)=[r0, r0, r0, r0, r0]}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a00)={0x184, 0x0, &(0x7f0000001780)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @free_buffer, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/173, 0xad, 0x2, 0x1f}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x2, 0x1, 0x8}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/100, 0x64, 0x1, 0x24}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/114, 0x72, 0x1, 0x36}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0x2, 0x2, 0x10}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000001740)={0x0, 0x20, 0x38}}, 0x1000}, @release={0x40046306, 0x3}], 0x88, 0x0, &(0x7f0000001940)="c8e76a57c444114ffb1fa243483c864aea6bd114c26b2a33b639b7f262b43c908e1ee51d5df9882d91cf780ce47f07be281642d7f711ffa132060dcb5ed2a6d2dffb9e55c319822a1ff3d07f62753bbdb88f562853dac1807b430bb04e6c9391b7b43ace5248ce5bd70b6adab960a7cd718b0c449051b7492af79de9864385b19367f2cf07487c3b"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001cc0)={'syztnl2\x00', &(0x7f0000001bc0)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x2, 0xfff, {{0x2a, 0x4, 0x1, 0x1a, 0xa8, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xfd, [@local]}, @noop, @lsrr={0x83, 0x17, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x16, 0x1, [{0x1, 0x10, "257e892750ca5e47b7e6f9f3b951"}]}, @timestamp_addr={0x44, 0x3c, 0xbd, 0x1, 0x2, [{@local, 0x3ff}, {@empty, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0x9}, {@loopback, 0xb94}, {@empty, 0x8}]}, @rr={0x7, 0x13, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x27}, @loopback]}, @ssrr={0x89, 0xb, 0x8f, [@private=0xa010100, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_tracing={0x1a, 0x7, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x430}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000001a80)='syzkaller\x00', 0x101, 0xde, &(0x7f0000001ac0)=""/222, 0x40f00, 0xb, '\x00', r3, 0x17, r0, 0x8, &(0x7f0000001d00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x6, 0xb, 0x7f, 0x6}, 0x10, 0xc126}, 0x80) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0166750100"], 0x6) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000500)=@raw=[@exit, @cb_func, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xa6}, @exit], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x9, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000001580)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xc, 0x100, 0x2}, 0x10, 0x14d46, r0, 0x0, &(0x7f0000001600)=[r0, r0, r0, r0, r0]}, 0x80) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a00)={0x184, 0x0, &(0x7f0000001780)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @free_buffer, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/173, 0xad, 0x2, 0x1f}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x2, 0x1, 0x8}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/100, 0x64, 0x1, 0x24}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/114, 0x72, 0x1, 0x36}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0x2, 0x2, 0x10}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000001740)={0x0, 0x20, 0x38}}, 0x1000}, @release={0x40046306, 0x3}], 0x88, 0x0, &(0x7f0000001940)="c8e76a57c444114ffb1fa243483c864aea6bd114c26b2a33b639b7f262b43c908e1ee51d5df9882d91cf780ce47f07be281642d7f711ffa132060dcb5ed2a6d2dffb9e55c319822a1ff3d07f62753bbdb88f562853dac1807b430bb04e6c9391b7b43ace5248ce5bd70b6adab960a7cd718b0c449051b7492af79de9864385b19367f2cf07487c3b"}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001cc0)={'syztnl2\x00', &(0x7f0000001bc0)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x2, 0xfff, {{0x2a, 0x4, 0x1, 0x1a, 0xa8, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xfd, [@local]}, @noop, @lsrr={0x83, 0x17, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x16, 0x1, [{0x1, 0x10, "257e892750ca5e47b7e6f9f3b951"}]}, @timestamp_addr={0x44, 0x3c, 0xbd, 0x1, 0x2, [{@local, 0x3ff}, {@empty, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0x9}, {@loopback, 0xb94}, {@empty, 0x8}]}, @rr={0x7, 0x13, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x27}, @loopback]}, @ssrr={0x89, 0xb, 0x8f, [@private=0xa010100, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_tracing={0x1a, 0x7, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x430}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000001a80)='syzkaller\x00', 0x101, 0xde, &(0x7f0000001ac0)=""/222, 0x40f00, 0xb, '\x00', r3, 0x17, r0, 0x8, &(0x7f0000001d00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x6, 0xb, 0x7f, 0x6}, 0x10, 0xc126}, 0x80) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0166750100"], 0x6) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 17:26:43 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:43 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x2, "284781", 0x7f, 0x3f}) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x81, 0x232020) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x2, "284781", 0x7f, 0x3f}) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x81, 0x232020) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) (async) 17:26:43 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_scan_enable={{}, {0x9, 0x2}}}, 0xa) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000200), 0xfff, 0x12082) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000240)={0x3, [0x7f], 0x3}, 0x10) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) (async, rerun: 32) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r7, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4) (async) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) (async) r8 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x48080) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xd}]}, 0x74}}, 0x1) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x0) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x0) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="016675fc72b15333bd35bc0f356d22094383c90e1ed5debad6bd59c33da83764c3833c96e30996e1ee6188751d33e05437abe48aff738db26b768b9a91a4cc42b809310e700509803435d79c04d2df3ffa8b8959710b6ca69f78cbb770a1aa2c622b000000"], 0x6) 17:26:44 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x13, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="018c0406aaaaa7aaaa00"], 0xfffffdef) 17:26:44 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x2, "284781", 0x7f, 0x3f}) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x81, 0x232020) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x2, "284781", 0x7f, 0x3f}) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x81, 0x232020) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) (async) 17:26:44 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000500)=@raw=[@exit, @cb_func, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xa6}, @exit], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x9, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000001580)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xc, 0x100, 0x2}, 0x10, 0x14d46, r0, 0x0, &(0x7f0000001600)=[r0, r0, r0, r0, r0]}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a00)={0x184, 0x0, &(0x7f0000001780)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @free_buffer, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/173, 0xad, 0x2, 0x1f}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x2, 0x1, 0x8}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/100, 0x64, 0x1, 0x24}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/114, 0x72, 0x1, 0x36}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0x2, 0x2, 0x10}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000001740)={0x0, 0x20, 0x38}}, 0x1000}, @release={0x40046306, 0x3}], 0x88, 0x0, &(0x7f0000001940)="c8e76a57c444114ffb1fa243483c864aea6bd114c26b2a33b639b7f262b43c908e1ee51d5df9882d91cf780ce47f07be281642d7f711ffa132060dcb5ed2a6d2dffb9e55c319822a1ff3d07f62753bbdb88f562853dac1807b430bb04e6c9391b7b43ace5248ce5bd70b6adab960a7cd718b0c449051b7492af79de9864385b19367f2cf07487c3b"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001cc0)={'syztnl2\x00', &(0x7f0000001bc0)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x2, 0xfff, {{0x2a, 0x4, 0x1, 0x1a, 0xa8, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xfd, [@local]}, @noop, @lsrr={0x83, 0x17, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x16, 0x1, [{0x1, 0x10, "257e892750ca5e47b7e6f9f3b951"}]}, @timestamp_addr={0x44, 0x3c, 0xbd, 0x1, 0x2, [{@local, 0x3ff}, {@empty, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0x9}, {@loopback, 0xb94}, {@empty, 0x8}]}, @rr={0x7, 0x13, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x27}, @loopback]}, @ssrr={0x89, 0xb, 0x8f, [@private=0xa010100, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_tracing={0x1a, 0x7, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x430}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000001a80)='syzkaller\x00', 0x101, 0xde, &(0x7f0000001ac0)=""/222, 0x40f00, 0xb, '\x00', r3, 0x17, r0, 0x8, &(0x7f0000001d00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x6, 0xb, 0x7f, 0x6}, 0x10, 0xc126}, 0x80) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0166750100"], 0x6) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000500)=@raw=[@exit, @cb_func, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xa6}, @exit], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x9, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000001580)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xc, 0x100, 0x2}, 0x10, 0x14d46, r0, 0x0, &(0x7f0000001600)=[r0, r0, r0, r0, r0]}, 0x80) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a00)={0x184, 0x0, &(0x7f0000001780)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @free_buffer, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/173, 0xad, 0x2, 0x1f}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x2, 0x1, 0x8}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/100, 0x64, 0x1, 0x24}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/114, 0x72, 0x1, 0x36}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000016c0)={@fda={0x66646185, 0x2, 0x2, 0x10}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000001740)={0x0, 0x20, 0x38}}, 0x1000}, @release={0x40046306, 0x3}], 0x88, 0x0, &(0x7f0000001940)="c8e76a57c444114ffb1fa243483c864aea6bd114c26b2a33b639b7f262b43c908e1ee51d5df9882d91cf780ce47f07be281642d7f711ffa132060dcb5ed2a6d2dffb9e55c319822a1ff3d07f62753bbdb88f562853dac1807b430bb04e6c9391b7b43ace5248ce5bd70b6adab960a7cd718b0c449051b7492af79de9864385b19367f2cf07487c3b"}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001cc0)={'syztnl2\x00', &(0x7f0000001bc0)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x2, 0xfff, {{0x2a, 0x4, 0x1, 0x1a, 0xa8, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xfd, [@local]}, @noop, @lsrr={0x83, 0x17, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x16, 0x1, [{0x1, 0x10, "257e892750ca5e47b7e6f9f3b951"}]}, @timestamp_addr={0x44, 0x3c, 0xbd, 0x1, 0x2, [{@local, 0x3ff}, {@empty, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0x9}, {@loopback, 0xb94}, {@empty, 0x8}]}, @rr={0x7, 0x13, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x27}, @loopback]}, @ssrr={0x89, 0xb, 0x8f, [@private=0xa010100, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_tracing={0x1a, 0x7, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x430}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000001a80)='syzkaller\x00', 0x101, 0xde, &(0x7f0000001ac0)=""/222, 0x40f00, 0xb, '\x00', r3, 0x17, r0, 0x8, &(0x7f0000001d00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x6, 0xb, 0x7f, 0x6}, 0x10, 0xc126}, 0x80) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0166750100"], 0x6) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 17:26:44 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xadc29b636baf58ed}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x1405, 0x100, 0x70bd25, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x5}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40040}, 0x4008000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004859}, 0x4008014) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, 0x0, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xadc29b636baf58ed}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x1405, 0x100, 0x70bd25, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x5}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40040}, 0x4008000) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004859}, 0x4008014) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r2, 0x0, 0x6) (async) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="016675fc72b15333bd35bc0f356d22094383c90e1ed5debad6bd59c33da83764c3833c96e30996e1ee6188751d33e05437abe48aff738db26b768b9a91a4cc42b809310e700509803435d79c04d2df3ffa8b8959710b6ca69f78cbb770a1aa2c622b000000"], 0x6) 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_scan_enable={{}, {0x9, 0x2}}}, 0xa) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000200), 0xfff, 0x12082) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000240)={0x3, [0x7f], 0x3}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r7, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x48080) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xd}]}, 0x74}}, 0x1) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_scan_enable={{}, {0x9, 0x2}}}, 0xa) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000200), 0xfff, 0x12082) (async) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000240)={0x3, [0x7f], 0x3}, 0x10) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) getpeername$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r7, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4) (async) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x48080) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xd}]}, 0x74}}, 0x1) (async) 17:26:44 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) recvmsg$qrtr(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000500)=[{0xf0, 0x0, 0x0, ""/219}, {0x78, 0x0, 0x0, ""/97}, {0x60, 0x0, 0x0, ""/79}, {0x100, 0x0, 0x0, ""/237}], 0x2c8, 0x122}, 0x38, 0x102) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000004c0)={0x20, "af1979"}, 0x6) 17:26:44 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x13, 0x4) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="018c0406aaaaa7aaaa00"], 0xfffffdef) 17:26:44 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/10], 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$sock_bt_hci(r1, 0x5452, &(0x7f0000000000)) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000091400022dfd7000fddbdf250102028000000800dfff020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x404c881) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x6) 17:26:44 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xadc29b636baf58ed}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x1405, 0x100, 0x70bd25, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x5}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40040}, 0x4008000) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004859}, 0x4008014) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, 0x0, 0x6) 17:26:44 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) recvmsg$qrtr(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000500)=[{0xf0, 0x0, 0x0, ""/219}, {0x78, 0x0, 0x0, ""/97}, {0x60, 0x0, 0x0, ""/79}, {0x100, 0x0, 0x0, ""/237}], 0x2c8, 0x122}, 0x38, 0x102) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000004c0)={0x20, "af1979"}, 0x6) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) recvmsg$qrtr(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000500)=[{0xf0, 0x0, 0x0, ""/219}, {0x78, 0x0, 0x0, ""/97}, {0x60, 0x0, 0x0, ""/79}, {0x100, 0x0, 0x0, ""/237}], 0x2c8, 0x122}, 0x38, 0x102) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000004c0)={0x20, "af1979"}, 0x6) (async) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="016675fc72b15333bd35bc0f356d22094383c90e1ed5debad6bd59c33da83764c3833c96e30996e1ee6188751d33e05437abe48aff738db26b768b9a91a4cc42b809310e700509803435d79c04d2df3ffa8b8959710b6ca69f78cbb770a1aa2c622b000000"], 0x6) 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xa68, 0x309a82) socketpair(0x2, 0x800, 0x4003, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000001c0)=0x401) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xa68, 0x309a82) (async) socketpair(0x2, 0x800, 0x4003, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000001c0)=0x401) (async, rerun: 64) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xa68, 0x309a82) (async, rerun: 64) socketpair(0x2, 0x800, 0x4003, &(0x7f0000000180)={0xffffffffffffffff}) (rerun: 64) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000001c0)=0x401) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 64) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x600000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c05000000e7ffffff"], 0xfffffdef) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)="27628ba40d11b1efaafb4871a52ede614d68129193a4380462ad94cf1d9a15c55be3601f9de03f664dd0700c71c255ac981013af2dcfed95ecb56908700b61fd54636b1e830e0bd1b2692f0e8b6b1fc907996a08a6f279f61ee5418ea885a573ddd4c742c5de2ce4dd953368bdc714ae4175538d1b9c8872b665c92a13bf2f7603668890c0b406d15940ada8abdea2fe7f987c0ee5e2c50355ec01725659b38bbda2b0fcde05eb083721e63a8d1d62ac9da2766dc1937de2331124c5da892c3a4662dc56b5312e5cd25eccb4f1a6ae160f") 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x600000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c05000000e7ffffff"], 0xfffffdef) (async) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)="27628ba40d11b1efaafb4871a52ede614d68129193a4380462ad94cf1d9a15c55be3601f9de03f664dd0700c71c255ac981013af2dcfed95ecb56908700b61fd54636b1e830e0bd1b2692f0e8b6b1fc907996a08a6f279f61ee5418ea885a573ddd4c742c5de2ce4dd953368bdc714ae4175538d1b9c8872b665c92a13bf2f7603668890c0b406d15940ada8abdea2fe7f987c0ee5e2c50355ec01725659b38bbda2b0fcde05eb083721e63a8d1d62ac9da2766dc1937de2331124c5da892c3a4662dc56b5312e5cd25eccb4f1a6ae160f") 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x600000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c05000000e7ffffff"], 0xfffffdef) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)="27628ba40d11b1efaafb4871a52ede614d68129193a4380462ad94cf1d9a15c55be3601f9de03f664dd0700c71c255ac981013af2dcfed95ecb56908700b61fd54636b1e830e0bd1b2692f0e8b6b1fc907996a08a6f279f61ee5418ea885a573ddd4c742c5de2ce4dd953368bdc714ae4175538d1b9c8872b665c92a13bf2f7603668890c0b406d15940ada8abdea2fe7f987c0ee5e2c50355ec01725659b38bbda2b0fcde05eb083721e63a8d1d62ac9da2766dc1937de2331124c5da892c3a4662dc56b5312e5cd25eccb4f1a6ae160f") 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r3}) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f351e57453f4f330100aaaaab00", @ANYRES8, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES8=r4], 0xfffffdef) 17:26:44 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x13, 0x4) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (rerun: 64) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="018c0406aaaaa7aaaa00"], 0xfffffdef) 17:26:44 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/10], 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$sock_bt_hci(r1, 0x5452, &(0x7f0000000000)) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000091400022dfd7000fddbdf250102028000000800dfff020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x404c881) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x6) 17:26:44 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) recvmsg$qrtr(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000500)=[{0xf0, 0x0, 0x0, ""/219}, {0x78, 0x0, 0x0, ""/97}, {0x60, 0x0, 0x0, ""/79}, {0x100, 0x0, 0x0, ""/237}], 0x2c8, 0x122}, 0x38, 0x102) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000004c0)={0x20, "af1979"}, 0x6) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) recvmsg$qrtr(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000500)=[{0xf0, 0x0, 0x0, ""/219}, {0x78, 0x0, 0x0, ""/97}, {0x60, 0x0, 0x0, ""/79}, {0x100, 0x0, 0x0, ""/237}], 0x2c8, 0x122}, 0x38, 0x102) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000004c0)={0x20, "af1979"}, 0x6) (async) 17:26:44 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x6bd5, "8b66ad", 0xc9, 0x6}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x901, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040000) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x18e02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = getpid() getpgid(r2) syz_open_dev$loop(&(0x7f0000000140), 0x4a1, 0x2000) syz_open_dev$loop(&(0x7f0000000180), 0xf5b4, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffb, 0x0, 0xff, 0x50, 0x6, r2}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c047baaaaaaaaaa00"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x18e02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) r2 = getpid() (rerun: 32) getpgid(r2) syz_open_dev$loop(&(0x7f0000000140), 0x4a1, 0x2000) (async, rerun: 64) syz_open_dev$loop(&(0x7f0000000180), 0xf5b4, 0x0) (async, rerun: 64) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffb, 0x0, 0xff, 0x50, 0x6, r2}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c047baaaaaaaaaa00"], 0xfffffdef) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (rerun: 64) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x18e02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = getpid() getpgid(r2) (async) syz_open_dev$loop(&(0x7f0000000140), 0x4a1, 0x2000) (async) syz_open_dev$loop(&(0x7f0000000180), 0xf5b4, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffb, 0x0, 0xff, 0x50, 0x6, r2}) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c047baaaaaaaaaa00"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0xfffff800, 0x4) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="81667509"], 0x6) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008821}, 0x4000) 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r3}) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f351e57453f4f330100aaaaab00", @ANYRES8, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES8=r4], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r3}) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f351e57453f4f330100aaaaab00", @ANYRES8, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES8=r4], 0xfffffdef) (async) 17:26:44 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/10], 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) (async) ioctl$sock_bt_hci(r1, 0x5452, &(0x7f0000000000)) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000091400022dfd7000fddbdf250102028000000800dfff020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x404c881) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x6) 17:26:44 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x6bd5, "8b66ad", 0xc9, 0x6}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x901, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040000) 17:26:44 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/57, 0x39, 0x1, 0x20}, @fda={0x66646185, 0x8, 0xbff, 0xa}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @exit_looper, @clear_death={0x400c630f, 0x2}], 0x5d, 0x0, &(0x7f0000000280)="2db82989359223ca071895f010dd90766e380d45452d04f63d2d66edda7b2d261d911c08f4d11245088e3de68d458075e71c2e2c2dd23161bac1bf1f8a78dd21004212679195e401450e34a39123c6386d1a26fbf3f576e4346757c3c6"}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r3}) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f351e57453f4f330100aaaaab00", @ANYRES8, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES8=r4], 0xfffffdef) 17:26:44 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/57, 0x39, 0x1, 0x20}, @fda={0x66646185, 0x8, 0xbff, 0xa}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @exit_looper, @clear_death={0x400c630f, 0x2}], 0x5d, 0x0, &(0x7f0000000280)="2db82989359223ca071895f010dd90766e380d45452d04f63d2d66edda7b2d261d911c08f4d11245088e3de68d458075e71c2e2c2dd23161bac1bf1f8a78dd21004212679195e401450e34a39123c6386d1a26fbf3f576e4346757c3c6"}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/57, 0x39, 0x1, 0x20}, @fda={0x66646185, 0x8, 0xbff, 0xa}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @exit_looper, @clear_death={0x400c630f, 0x2}], 0x5d, 0x0, &(0x7f0000000280)="2db82989359223ca071895f010dd90766e380d45452d04f63d2d66edda7b2d261d911c08f4d11245088e3de68d458075e71c2e2c2dd23161bac1bf1f8a78dd21004212679195e401450e34a39123c6386d1a26fbf3f576e4346757c3c6"}) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:44 executing program 2: syz_open_dev$vcsu(&(0x7f00000000c0), 0x200, 0x48a02) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) 17:26:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r2, 0x4cea5dd8e963f31d, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x99}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8820}, 0x44) write$bt_hci(r3, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:44 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x6bd5, "8b66ad", 0xc9, 0x6}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x901, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040000) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, 0x0, 0x6) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x6bd5, "8b66ad", 0xc9, 0x6}) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x901, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040000) (async) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0xfffff800, 0x4) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="81667509"], 0x6) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008821}, 0x4000) 17:26:44 executing program 2: syz_open_dev$vcsu(&(0x7f00000000c0), 0x200, 0x48a02) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x200, 0x48a02) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) (async) 17:26:44 executing program 2: syz_open_dev$vcsu(&(0x7f00000000c0), 0x200, 0x48a02) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) 17:26:44 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48081}, 0x40050) 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x800) 17:26:44 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, r0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x200400c0) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x29ada8d2}, @L2TP_ATTR_OFFSET={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000851}, 0x10) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0xfffff800, 0x4) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="81667509"], 0x6) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008821}, 0x4000) 17:26:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r2, 0x4cea5dd8e963f31d, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x99}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8820}, 0x44) (async) write$bt_hci(r3, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:44 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/57, 0x39, 0x1, 0x20}, @fda={0x66646185, 0x8, 0xbff, 0xa}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @exit_looper, @clear_death={0x400c630f, 0x2}], 0x5d, 0x0, &(0x7f0000000280)="2db82989359223ca071895f010dd90766e380d45452d04f63d2d66edda7b2d261d911c08f4d11245088e3de68d458075e71c2e2c2dd23161bac1bf1f8a78dd21004212679195e401450e34a39123c6386d1a26fbf3f576e4346757c3c6"}) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:44 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48081}, 0x40050) 17:26:44 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48081}, 0x40050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48081}, 0x40050) (async) 17:26:44 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x800) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x800) (async) 17:26:44 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) uname(&(0x7f00000001c0)=""/156) uname(&(0x7f0000000280)=""/59) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x147}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17:26:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) socketpair(0x28, 0x6, 0x5, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) getpeername$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x20) 17:26:44 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x3, 0xffff, {{0x20, 0x4, 0x0, 0x2d, 0x80, 0x65, 0x0, 0xb0, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@rr={0x7, 0x17, 0xa5, [@rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x5, [0x9, 0x5]}, @lsrr={0x83, 0x1f, 0xb0, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @empty, @local, @broadcast, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0xa, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1f}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xaba}]}, @end]}}}}}) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:44 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, r0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x200400c0) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x29ada8d2}, @L2TP_ATTR_OFFSET={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000851}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, r0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x200400c0) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x29ada8d2}, @L2TP_ATTR_OFFSET={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000851}, 0x10) (async) 17:26:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r2, 0x4cea5dd8e963f31d, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x99}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8820}, 0x44) write$bt_hci(r3, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r2, 0x4cea5dd8e963f31d, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x99}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8820}, 0x44) (async) write$bt_hci(r3, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) [ 2329.369587][T14645] ================================================================== [ 2329.377699][T14645] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch [ 2329.386646][T14645] [ 2329.388963][T14645] read-write to 0xffff88810004b490 of 8 bytes by task 14649 on cpu 1: [ 2329.397105][T14645] percpu_counter_add_batch+0x9a/0x110 [ 2329.402578][T14645] shmem_getpage_gfp+0x4b3/0x1750 [ 2329.407599][T14645] shmem_write_begin+0x84/0x110 [ 2329.412446][T14645] generic_perform_write+0x1d4/0x3f0 [ 2329.417738][T14645] __generic_file_write_iter+0xe3/0x280 [ 2329.423289][T14645] generic_file_write_iter+0x79/0x1c0 [ 2329.428662][T14645] vfs_write+0x468/0x760 [ 2329.432901][T14645] ksys_write+0xe8/0x1a0 [ 2329.437148][T14645] __x64_sys_write+0x3e/0x50 [ 2329.441736][T14645] do_syscall_64+0x2b/0x70 [ 2329.446168][T14645] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2329.452073][T14645] [ 2329.454395][T14645] read to 0xffff88810004b490 of 8 bytes by task 14645 on cpu 0: [ 2329.462026][T14645] __percpu_counter_compare+0x27/0x1e0 17:26:45 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x800) [ 2329.467495][T14645] shmem_getpage_gfp+0x47c/0x1750 [ 2329.472522][T14645] shmem_write_begin+0x84/0x110 [ 2329.477374][T14645] generic_perform_write+0x1d4/0x3f0 [ 2329.482666][T14645] __generic_file_write_iter+0xe3/0x280 [ 2329.488226][T14645] generic_file_write_iter+0x79/0x1c0 [ 2329.493607][T14645] vfs_write+0x468/0x760 [ 2329.497853][T14645] ksys_write+0xe8/0x1a0 [ 2329.502097][T14645] __x64_sys_write+0x3e/0x50 [ 2329.506688][T14645] do_syscall_64+0x2b/0x70 [ 2329.511107][T14645] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2329.517020][T14645] 17:26:45 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) uname(&(0x7f00000001c0)=""/156) uname(&(0x7f0000000280)=""/59) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x147}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) (async) uname(&(0x7f00000001c0)=""/156) (async) uname(&(0x7f0000000280)=""/59) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x147}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 17:26:45 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, r0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x200400c0) (async, rerun: 64) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x29ada8d2}, @L2TP_ATTR_OFFSET={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000851}, 0x10) 17:26:45 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f0000000140)=""/221, 0xdd, 0x2001, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) [ 2329.519338][T14645] value changed: 0x0000000000002933 -> 0x0000000000002953 [ 2329.526439][T14645] [ 2329.528753][T14645] Reported by Kernel Concurrency Sanitizer on: [ 2329.534897][T14645] CPU: 0 PID: 14645 Comm: syz-executor.5 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2329.545829][T14645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2329.555884][T14645] ================================================================== 17:26:45 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x309a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:45 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x309a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:45 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) socketpair(0x28, 0x6, 0x5, &(0x7f0000000080)) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) getpeername$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x20) 17:26:45 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x309a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:45 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x3, 0xffff, {{0x20, 0x4, 0x0, 0x2d, 0x80, 0x65, 0x0, 0xb0, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@rr={0x7, 0x17, 0xa5, [@rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x5, [0x9, 0x5]}, @lsrr={0x83, 0x1f, 0xb0, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @empty, @local, @broadcast, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0xa, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1f}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xaba}]}, @end]}}}}}) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x3, 0xffff, {{0x20, 0x4, 0x0, 0x2d, 0x80, 0x65, 0x0, 0xb0, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@rr={0x7, 0x17, 0xa5, [@rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x5, [0x9, 0x5]}, @lsrr={0x83, 0x1f, 0xb0, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @empty, @local, @broadcast, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0xa, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1f}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xaba}]}, @end]}}}}}) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:45 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f0000000140)=""/221, 0xdd, 0x2001, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) recvfrom$l2tp6(r1, &(0x7f0000000140)=""/221, 0xdd, 0x2001, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r2, &(0x7f0000000080)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) 17:26:45 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xfffffffffffffffd, 0x80300) write$bt_hci(r0, 0x0, 0x6) 17:26:45 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) uname(&(0x7f00000001c0)=""/156) uname(&(0x7f0000000280)=""/59) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x147}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17:26:45 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406ffffffffffff678fb7245af0866ec319c299b53da346d1f5bf979f406d6aa6da5bce96546a49fd9ed087611a415fe1b406d6ec21047907b0e63994edefe6b164"], 0xa) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x3, [0x8001, 0x84], 0x80}, 0x10) socketpair(0x21, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x4c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfc0000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x22040804) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 17:26:45 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xfffffffffffffffd, 0x80300) write$bt_hci(r0, 0x0, 0x6) 17:26:45 executing program 2: syz_open_dev$vcsu(&(0x7f00000000c0), 0xeab, 0x50f703) uname(&(0x7f0000000040)=""/88) 17:26:45 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async, rerun: 32) socketpair(0x28, 0x6, 0x5, &(0x7f0000000080)) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) getpeername$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x20) 17:26:45 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406ffffffffffff678fb7245af0866ec319c299b53da346d1f5bf979f406d6aa6da5bce96546a49fd9ed087611a415fe1b406d6ec21047907b0e63994edefe6b164"], 0xa) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x3, [0x8001, 0x84], 0x80}, 0x10) (async) socketpair(0x21, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r3 = socket$kcm(0x29, 0x5, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) (async) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x4c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfc0000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x22040804) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 17:26:45 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x3, 0xffff, {{0x20, 0x4, 0x0, 0x2d, 0x80, 0x65, 0x0, 0xb0, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@rr={0x7, 0x17, 0xa5, [@rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x5, [0x9, 0x5]}, @lsrr={0x83, 0x1f, 0xb0, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @empty, @local, @broadcast, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0xa, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1f}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xaba}]}, @end]}}}}}) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x3, 0xffff, {{0x20, 0x4, 0x0, 0x2d, 0x80, 0x65, 0x0, 0xb0, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@rr={0x7, 0x17, 0xa5, [@rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x5, [0x9, 0x5]}, @lsrr={0x83, 0x1f, 0xb0, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @empty, @local, @broadcast, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0xa, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1f}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xaba}]}, @end]}}}}}) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:45 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xfffffffffffffffd, 0x80300) write$bt_hci(r0, 0x0, 0x6) 17:26:45 executing program 2: syz_open_dev$vcsu(&(0x7f00000000c0), 0xeab, 0x50f703) (async) uname(&(0x7f0000000040)=""/88) 17:26:45 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f0000000140)=""/221, 0xdd, 0x2001, 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r2, &(0x7f0000000080)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:45 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48874}, 0x0) 17:26:45 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406ffffffffffff678fb7245af0866ec319c299b53da346d1f5bf979f406d6aa6da5bce96546a49fd9ed087611a415fe1b406d6ec21047907b0e63994edefe6b164"], 0xa) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x3, [0x8001, 0x84], 0x80}, 0x10) socketpair(0x21, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x4c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfc0000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x22040804) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406ffffffffffff678fb7245af0866ec319c299b53da346d1f5bf979f406d6aa6da5bce96546a49fd9ed087611a415fe1b406d6ec21047907b0e63994edefe6b164"], 0xa) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x3, [0x8001, 0x84], 0x80}, 0x10) (async) socketpair(0x21, 0x5, 0x7, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) (async) socket$kcm(0x29, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) (async) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x4c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000840) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfc0000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x22040804) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) 17:26:45 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:45 executing program 2: syz_open_dev$vcsu(&(0x7f00000000c0), 0xeab, 0x50f703) uname(&(0x7f0000000040)=""/88) 17:26:45 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406a8aaaaaaaa00"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x200000) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x6) 17:26:45 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaa7ccaaaa00"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) write$bt_hci(r0, &(0x7f0000000280)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"a7637ce751da5f61"}}}, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000240), 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 17:26:45 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0xa, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r1}) recvmsg$qrtr(r2, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/173, 0xad}], 0x1, &(0x7f0000000400)=[{0xb0, 0x0, 0x0, ""/154}, {0x88, 0x0, 0x0, ""/117}, {0xd8, 0x0, 0x0, ""/199}, {0x60, 0x0, 0x0, ""/78}, {0x40, 0x0, 0x0, ""/41}], 0xffffffffffffff2c, 0x20}, 0x38, 0x160) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000041402002cbd7000fedbff0b080001000100000008628f00010000000800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x74629063ba9eb6be) 17:26:45 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:45 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48874}, 0x0) 17:26:45 executing program 2: r0 = getegid() r1 = getegid() r2 = getegid() r3 = getegid() setgroups(0x8, &(0x7f0000000040)=[r0, 0xffffffffffffffff, 0xee00, r1, 0xffffffffffffffff, r2, r3, 0xee00]) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:45 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406a8aaaaaaaa00"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x200000) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406a8aaaaaaaa00"], 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x200000) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x6) (async) 17:26:45 executing program 2: r0 = getegid() (async) r1 = getegid() r2 = getegid() (async) r3 = getegid() setgroups(0x8, &(0x7f0000000040)=[r0, 0xffffffffffffffff, 0xee00, r1, 0xffffffffffffffff, r2, r3, 0xee00]) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:45 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48874}, 0x0) 17:26:45 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async, rerun: 64) socketpair(0xa, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r1}) recvmsg$qrtr(r2, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/173, 0xad}], 0x1, &(0x7f0000000400)=[{0xb0, 0x0, 0x0, ""/154}, {0x88, 0x0, 0x0, ""/117}, {0xd8, 0x0, 0x0, ""/199}, {0x60, 0x0, 0x0, ""/78}, {0x40, 0x0, 0x0, ""/41}], 0xffffffffffffff2c, 0x20}, 0x38, 0x160) (async) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000041402002cbd7000fedbff0b080001000100000008628f00010000000800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x74629063ba9eb6be) 17:26:45 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:45 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaa7ccaaaa00"], 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000280)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"a7637ce751da5f61"}}}, 0xc) (async, rerun: 64) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000240), 0x4) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 17:26:45 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406a8aaaaaaaa00"], 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x200000) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x6) 17:26:45 executing program 2: r0 = getegid() (async) r1 = getegid() (async, rerun: 32) r2 = getegid() (async, rerun: 32) r3 = getegid() setgroups(0x8, &(0x7f0000000040)=[r0, 0xffffffffffffffff, 0xee00, r1, 0xffffffffffffffff, r2, r3, 0xee00]) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:45 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xe00) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1266d8198f5aca0c4c398abc7b951fe24679"], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0x9, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) 17:26:45 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaa7ccaaaa00"], 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) (async) write$bt_hci(r0, &(0x7f0000000280)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"a7637ce751da5f61"}}}, 0xc) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000240), 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 17:26:45 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x140a, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x15}, 0x800) 17:26:45 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socketpair(0xa, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r1}) recvmsg$qrtr(r2, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/173, 0xad}], 0x1, &(0x7f0000000400)=[{0xb0, 0x0, 0x0, ""/154}, {0x88, 0x0, 0x0, ""/117}, {0xd8, 0x0, 0x0, ""/199}, {0x60, 0x0, 0x0, ""/78}, {0x40, 0x0, 0x0, ""/41}], 0xffffffffffffff2c, 0x20}, 0x38, 0x160) (async) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000041402002cbd7000fedbff0b080001000100000008628f00010000000800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x74629063ba9eb6be) 17:26:45 executing program 2: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140b, 0x100, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:45 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x61c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) 17:26:45 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:45 executing program 2: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140b, 0x100, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140b, 0x100, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) 17:26:45 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xe00) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1266d8198f5aca0c4c398abc7b951fe24679"], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0x9, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xe00) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1266d8198f5aca0c4c398abc7b951fe24679"], 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0x9, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) (async) 17:26:45 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x140a, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x15}, 0x800) 17:26:45 executing program 1: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @remote, 0x5b36, 0x2}, 0x20) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:45 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xe00) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1266d8198f5aca0c4c398abc7b951fe24679"], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0x9, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xe00) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1266d8198f5aca0c4c398abc7b951fe24679"], 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0x9, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) (async) 17:26:45 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x140a, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x15}, 0x800) 17:26:45 executing program 1: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @remote, 0x5b36, 0x2}, 0x20) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:45 executing program 2: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140b, 0x100, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:45 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffdffd, 0x501a03) write$bt_hci(r0, 0x0, 0x6) 17:26:45 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x61c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x61c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) 17:26:45 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x48908) 17:26:45 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:46 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffdffd, 0x501a03) write$bt_hci(r0, 0x0, 0x6) 17:26:46 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffdffd, 0x501a03) write$bt_hci(r0, 0x0, 0x6) 17:26:46 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xad4, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = socket$kcm(0x29, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x5, "a4a2e4", 0x4, 0x81}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fddbdf250d0000000a00090000000000eeff00000600000008002b0001000000050033000200000005002a0000000000ed6424fd6f14feed9c5b0944d4427970370df612cd108bb7d5344a350875716db92cd4ee2b1184690135677397e517c7c5f8b50a224c1b666eaafd7b654389d1fe667e92438b44f53e23eb1eed07f7ba145ae1c58d5af0"], 0x48}, 0x1, 0x0, 0x0, 0x20000014}, 0x8015) 17:26:46 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xad4, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = socket$kcm(0x29, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r0}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x5, "a4a2e4", 0x4, 0x81}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fddbdf250d0000000a00090000000000eeff00000600000008002b0001000000050033000200000005002a0000000000ed6424fd6f14feed9c5b0944d4427970370df612cd108bb7d5344a350875716db92cd4ee2b1184690135677397e517c7c5f8b50a224c1b666eaafd7b654389d1fe667e92438b44f53e23eb1eed07f7ba145ae1c58d5af0"], 0x48}, 0x1, 0x0, 0x0, 0x20000014}, 0x8015) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"50f559"}}}, 0x9) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:46 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xad4, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = socket$kcm(0x29, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x5, "a4a2e4", 0x4, 0x81}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fddbdf250d0000000a00090000000000eeff00000600000008002b0001000000050033000200000005002a0000000000ed6424fd6f14feed9c5b0944d4427970370df612cd108bb7d5344a350875716db92cd4ee2b1184690135677397e517c7c5f8b50a224c1b666eaafd7b654389d1fe667e92438b44f53e23eb1eed07f7ba145ae1c58d5af0"], 0x48}, 0x1, 0x0, 0x0, 0x20000014}, 0x8015) 17:26:46 executing program 1: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @remote, 0x5b36, 0x2}, 0x20) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:46 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x48908) 17:26:46 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:46 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x61c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) (rerun: 32) 17:26:46 executing program 3: socketpair(0x2a, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, 0x0, 0x6) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x17c, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/42, 0x2a, 0x2, 0x38}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x1, 0x16}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x201, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/1, 0x1, 0x1, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/128, 0x80, 0x1, 0x11}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x5, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x3c}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/172, 0xac, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/183, 0xb7, 0x2, 0x32}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x1}, @free_buffer, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x6b, 0x0, &(0x7f0000000880)="25623501bc4cb9d8dfb3bd2955a5d666a2ac4e3e0aec2cbe8d0337d36dea2cdb549f54a88a6fd2afebcd16b126e1b0056d264ba5fcfcf8a0b37b4c4502005bfa3d33f4dc63e2c0fc6c0b165d4ec1758e4ae6c8edef794c37ee65e1599dd598fdbb782460406131ef73a71d"}) 17:26:46 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x22080) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:46 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x22080) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (rerun: 64) 17:26:46 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x22080) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:46 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 17:26:46 executing program 1: ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000180)) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c04068dcfaaaaaa00"], 0xfffffdef) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1409, 0x10, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x48000) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040880}, 0x1) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"50f559"}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:46 executing program 3: socketpair(0x2a, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, 0x0, 0x6) (async, rerun: 32) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x17c, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/42, 0x2a, 0x2, 0x38}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x1, 0x16}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x201, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/1, 0x1, 0x1, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/128, 0x80, 0x1, 0x11}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x5, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x3c}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/172, 0xac, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/183, 0xb7, 0x2, 0x32}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x1}, @free_buffer, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x6b, 0x0, &(0x7f0000000880)="25623501bc4cb9d8dfb3bd2955a5d666a2ac4e3e0aec2cbe8d0337d36dea2cdb549f54a88a6fd2afebcd16b126e1b0056d264ba5fcfcf8a0b37b4c4502005bfa3d33f4dc63e2c0fc6c0b165d4ec1758e4ae6c8edef794c37ee65e1599dd598fdbb782460406131ef73a71d"}) 17:26:46 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a10050000000000"], 0x9) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="450a5081f39dd762f4b72d81589d89629766b8d6950b9d723da64e5ddc8dde000000"], 0xfffffdef) 17:26:46 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x48908) 17:26:46 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async, rerun: 32) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 17:26:46 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a10050000000000"], 0x9) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="450a5081f39dd762f4b72d81589d89629766b8d6950b9d723da64e5ddc8dde000000"], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a10050000000000"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="450a5081f39dd762f4b72d81589d89629766b8d6950b9d723da64e5ddc8dde000000"], 0xfffffdef) (async) 17:26:46 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x80000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x140a, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8400}, 0x24040000) 17:26:46 executing program 1: ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000180)) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c04068dcfaaaaaa00"], 0xfffffdef) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1409, 0x10, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x48000) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040880}, 0x1) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"50f559"}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:46 executing program 3: socketpair(0x2a, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, 0x0, 0x6) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x17c, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/42, 0x2a, 0x2, 0x38}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x1, 0x16}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x201, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/1, 0x1, 0x1, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/128, 0x80, 0x1, 0x11}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x5, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x3c}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/172, 0xac, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/183, 0xb7, 0x2, 0x32}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x1}, @free_buffer, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x6b, 0x0, &(0x7f0000000880)="25623501bc4cb9d8dfb3bd2955a5d666a2ac4e3e0aec2cbe8d0337d36dea2cdb549f54a88a6fd2afebcd16b126e1b0056d264ba5fcfcf8a0b37b4c4502005bfa3d33f4dc63e2c0fc6c0b165d4ec1758e4ae6c8edef794c37ee65e1599dd598fdbb782460406131ef73a71d"}) socketpair(0x2a, 0x80000, 0x4, &(0x7f0000000000)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r2, 0x0, 0x6) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x17c, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/42, 0x2a, 0x2, 0x38}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x1, 0x16}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x201, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/1, 0x1, 0x1, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/128, 0x80, 0x1, 0x11}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x5, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x3c}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/172, 0xac, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/183, 0xb7, 0x2, 0x32}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x1}, @free_buffer, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x6b, 0x0, &(0x7f0000000880)="25623501bc4cb9d8dfb3bd2955a5d666a2ac4e3e0aec2cbe8d0337d36dea2cdb549f54a88a6fd2afebcd16b126e1b0056d264ba5fcfcf8a0b37b4c4502005bfa3d33f4dc63e2c0fc6c0b165d4ec1758e4ae6c8edef794c37ee65e1599dd598fdbb782460406131ef73a71d"}) (async) 17:26:46 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x80000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x140a, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8400}, 0x24040000) 17:26:46 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 17:26:46 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x80000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x140a, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8400}, 0x24040000) 17:26:46 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010a10050000000000"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="450a5081f39dd762f4b72d81589d89629766b8d6950b9d723da64e5ddc8dde000000"], 0xfffffdef) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x90000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="c0b65ad1b2b96dc697f6ff0d269b35a1e2b83ed97e6b6d608f1463f69c36b2abad6311ee95595bd05d4a6607a3b71459742db41be0287fca2900fdbfc31be6c9a38ba14c8fbacf0586fbdd688ea3faa64d278fff8b4e5e50b4c7cb219611b189be178b8544c19909f8f4825f58c0ba2e5862fc279254e6f039"], 0x6) 17:26:46 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a00) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1110}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x48800) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x90000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="c0b65ad1b2b96dc697f6ff0d269b35a1e2b83ed97e6b6d608f1463f69c36b2abad6311ee95595bd05d4a6607a3b71459742db41be0287fca2900fdbfc31be6c9a38ba14c8fbacf0586fbdd688ea3faa64d278fff8b4e5e50b4c7cb219611b189be178b8544c19909f8f4825f58c0ba2e5862fc279254e6f039"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x90000) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="c0b65ad1b2b96dc697f6ff0d269b35a1e2b83ed97e6b6d608f1463f69c36b2abad6311ee95595bd05d4a6607a3b71459742db41be0287fca2900fdbfc31be6c9a38ba14c8fbacf0586fbdd688ea3faa64d278fff8b4e5e50b4c7cb219611b189be178b8544c19909f8f4825f58c0ba2e5862fc279254e6f039"], 0x6) (async) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x90000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="c0b65ad1b2b96dc697f6ff0d269b35a1e2b83ed97e6b6d608f1463f69c36b2abad6311ee95595bd05d4a6607a3b71459742db41be0287fca2900fdbfc31be6c9a38ba14c8fbacf0586fbdd688ea3faa64d278fff8b4e5e50b4c7cb219611b189be178b8544c19909f8f4825f58c0ba2e5862fc279254e6f039"], 0x6) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, 0x1405, 0x4, 0x70bd26, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:46 executing program 1: ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000180)) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c04068dcfaaaaaa00"], 0xfffffdef) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1409, 0x10, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x48000) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040880}, 0x1) (rerun: 64) 17:26:46 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe97ba59d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x4840) 17:26:46 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x141102) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}}, 0x8004) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, 0x1405, 0x4, 0x70bd26, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, 0x1405, 0x4, 0x70bd26, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:46 executing program 0: write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc9}}}, 0x6) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:46 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a00) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1110}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x48800) 17:26:46 executing program 1: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54288ad2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a7e27f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5be6a191}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872bad3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x488af009}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce5fa14}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cb552ad}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x835b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18d18354}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3492}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1aa6ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x815b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c33cee6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5a35e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56c3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5ffca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616bded1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fc9a862}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x200bd25d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d06772}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}]}]}, 0x1a4}}, 0x8085) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0130950000aaaaaaaa00"], 0xfffffdef) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, 0x1405, 0x4, 0x70bd26, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:46 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x141102) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}}, 0x8004) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, 0x0, 0x6) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x141102) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}}, 0x8004) (async) 17:26:46 executing program 0: write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc9}}}, 0x6) (async, rerun: 64) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (rerun: 64) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:46 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a00) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1110}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x48800) 17:26:46 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe97ba59d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x4840) socket$packet(0x11, 0x2, 0x300) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe97ba59d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x4840) (async) 17:26:46 executing program 1: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54288ad2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a7e27f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5be6a191}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872bad3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x488af009}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce5fa14}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cb552ad}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x835b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18d18354}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3492}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1aa6ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x815b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c33cee6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5a35e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56c3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5ffca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616bded1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fc9a862}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x200bd25d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d06772}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}]}]}, 0x1a4}}, 0x8085) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0130950000aaaaaaaa00"], 0xfffffdef) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54288ad2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a7e27f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5be6a191}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872bad3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x488af009}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce5fa14}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cb552ad}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x835b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18d18354}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3492}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1aa6ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x815b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c33cee6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5a35e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56c3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5ffca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616bded1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fc9a862}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x200bd25d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d06772}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}]}]}, 0x1a4}}, 0x8085) (async) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0130950000aaaaaaaa00"], 0xfffffdef) (async) 17:26:46 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe97ba59d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x4840) 17:26:46 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x141102) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}}, 0x8004) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="110cd8a55cda3bcac727"], 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000140)="d2c6ca4c8b4938a1da1ae3416909dbdb7526f812b8a72ce264623f5f0392ded4311bd599d687847a76a34ce5ee249b632e46953e225578e4b6422e6c703ffd0f5902bc7d9c219bc9dd09cb52ecc5e0915933ca4d29c2519bd24760541fb39b0a02c9807559754ee74cdf2cf77f6107be541c1a7d1a490efefe8fbab91dfef3bcad5bee32b9199202d415d1b2c686a20b5730d6e153c7c351bad648c706b049d3cef46dfff8f8636a667d670614e35781ad7d95e589238f8c84adc33200222bd3c13576d5dac46b28a19d7df6cf42bd2740b1ddc4a57001740bdec8131e31") write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667709"], 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x5, 0x1, 0x8001, 0x4}}}, 0xb) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x2, "70967e", 0x1, 0x7}) 17:26:46 executing program 0: write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc9}}}, 0x6) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:46 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:46 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x90) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="110cd8a55cda3bcac727"], 0xfffffdef) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000140)="d2c6ca4c8b4938a1da1ae3416909dbdb7526f812b8a72ce264623f5f0392ded4311bd599d687847a76a34ce5ee249b632e46953e225578e4b6422e6c703ffd0f5902bc7d9c219bc9dd09cb52ecc5e0915933ca4d29c2519bd24760541fb39b0a02c9807559754ee74cdf2cf77f6107be541c1a7d1a490efefe8fbab91dfef3bcad5bee32b9199202d415d1b2c686a20b5730d6e153c7c351bad648c706b049d3cef46dfff8f8636a667d670614e35781ad7d95e589238f8c84adc33200222bd3c13576d5dac46b28a19d7df6cf42bd2740b1ddc4a57001740bdec8131e31") (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667709"], 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x5, 0x1, 0x8001, 0x4}}}, 0xb) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x2, "70967e", 0x1, 0x7}) 17:26:46 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:46 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000040000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:46 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 17:26:46 executing program 1: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54288ad2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a7e27f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5be6a191}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872bad3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x488af009}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce5fa14}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cb552ad}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x835b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18d18354}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3492}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1aa6ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x815b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c33cee6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5a35e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56c3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5ffca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616bded1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fc9a862}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x200bd25d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d06772}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}]}]}, 0x1a4}}, 0x8085) (async) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0130950000aaaaaaaa00"], 0xfffffdef) 17:26:47 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:47 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x109a02) (async) write$bt_hci(r0, 0x0, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) 17:26:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000040000000"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:47 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="110cd8a55cda3bcac727"], 0xfffffdef) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000140)="d2c6ca4c8b4938a1da1ae3416909dbdb7526f812b8a72ce264623f5f0392ded4311bd599d687847a76a34ce5ee249b632e46953e225578e4b6422e6c703ffd0f5902bc7d9c219bc9dd09cb52ecc5e0915933ca4d29c2519bd24760541fb39b0a02c9807559754ee74cdf2cf77f6107be541c1a7d1a490efefe8fbab91dfef3bcad5bee32b9199202d415d1b2c686a20b5730d6e153c7c351bad648c706b049d3cef46dfff8f8636a667d670614e35781ad7d95e589238f8c84adc33200222bd3c13576d5dac46b28a19d7df6cf42bd2740b1ddc4a57001740bdec8131e31") write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667709"], 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x5, 0x1, 0x8001, 0x4}}}, 0xb) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x2, "70967e", 0x1, 0x7}) 17:26:47 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010c03000000045af17ee5b13a0b6404"], 0xfffffdef) 17:26:47 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:47 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x90) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x90) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) 17:26:47 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 17:26:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000040000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:47 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0x3ff, "cc50a8"}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0xf8, "80cce9", 0x1}) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x7, @none, 0x5}, 0xe) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) write$cgroup_int(r3, &(0x7f00000001c0)=0x3ff, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) io_uring_setup(0x5df8, &(0x7f0000000100)={0x0, 0xa981, 0x0, 0x1, 0x157, 0x0, r2}) 17:26:47 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010c03000000045af17ee5b13a0b6404"], 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010c03000000045af17ee5b13a0b6404"], 0xfffffdef) (async) 17:26:47 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:47 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x90) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:47 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x208, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xeacc}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf2d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4800) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) write$bt_hci(r3, 0x0, 0x6) 17:26:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = accept4$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e, 0x40800) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000480)={r3}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r1) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r5, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r4, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4de1f2f5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0xc0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1403, 0x50c, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x3f, "996923"}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 17:26:47 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0x3ff, "cc50a8"}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0xf8, "80cce9", 0x1}) (async) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x7, @none, 0x5}, 0xe) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) write$cgroup_int(r3, &(0x7f00000001c0)=0x3ff, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) io_uring_setup(0x5df8, &(0x7f0000000100)={0x0, 0xa981, 0x0, 0x1, 0x157, 0x0, r2}) 17:26:47 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0x3ff, "cc50a8"}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0xf8, "80cce9", 0x1}) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x7, @none, 0x5}, 0xe) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) write$cgroup_int(r3, &(0x7f00000001c0)=0x3ff, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) io_uring_setup(0x5df8, &(0x7f0000000100)={0x0, 0xa981, 0x0, 0x1, 0x157, 0x0, r2}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0x3ff, "cc50a8"}, 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0xf8, "80cce9", 0x1}) (async) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x3, 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x7, @none, 0x5}, 0xe) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async) write$cgroup_int(r3, &(0x7f00000001c0)=0x3ff, 0x12) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) io_uring_setup(0x5df8, &(0x7f0000000100)={0x0, 0xa981, 0x0, 0x1, 0x157, 0x0, r2}) (async) 17:26:47 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010c03000000045af17ee5b13a0b6404"], 0xfffffdef) 17:26:47 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x208, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xeacc}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf2d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4800) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) write$bt_hci(r3, 0x0, 0x6) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x208, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xeacc}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf2d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4800) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) write$bt_hci(r3, 0x0, 0x6) (async) 17:26:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = accept4$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e, 0x40800) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000480)={r3}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r1) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r5, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r4, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4de1f2f5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0xc0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1403, 0x50c, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x3f, "996923"}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 17:26:47 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016275092a"], 0x6) 17:26:47 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x208, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xeacc}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf2d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4800) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) write$bt_hci(r3, 0x0, 0x6) 17:26:47 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0xc) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x100, 0x12) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @disconn_phy_link={{0x437, 0x2}, {0xc9, 0x8}}}, 0x6) 17:26:47 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = accept4$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e, 0x40800) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000480)={r3}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r1) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r5, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r4, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4de1f2f5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0xc0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1403, 0x50c, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x3f, "996923"}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 17:26:47 executing program 2: ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x48a02) 17:26:47 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x3f, 0x200) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x1f, 0x0, 0x6, 0x6}, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x10ba02) write$bt_hci(r1, 0x0, 0x6) 17:26:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010a1445002fd2ff04ab9fcb46b1063d30f6d7a3c94eafd8ecb0b7c09ef594f156b9dc8ac6aab34676d08eae706f"], 0x9) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1}) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) 17:26:47 executing program 2: ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x48a02) 17:26:47 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000080)={0x1, @role_discovery={{0x809, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:47 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x3f, 0x200) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x1f, 0x0, 0x6, 0x6}, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x10ba02) write$bt_hci(r1, 0x0, 0x6) syz_open_dev$vcsu(&(0x7f0000000300), 0x3f, 0x200) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x1f, 0x0, 0x6, 0x6}, 0x6) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x10ba02) (async) write$bt_hci(r1, 0x0, 0x6) (async) 17:26:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010a1445002fd2ff04ab9fcb46b1063d30f6d7a3c94eafd8ecb0b7c09ef594f156b9dc8ac6aab34676d08eae706f"], 0x9) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1}) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) 17:26:47 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016275092a"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016275092a"], 0x6) (async) 17:26:47 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0xc) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x100, 0x12) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @disconn_phy_link={{0x437, 0x2}, {0xc9, 0x8}}}, 0x6) 17:26:47 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x3f, 0x200) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x1f, 0x0, 0x6, 0x6}, 0x6) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x10ba02) write$bt_hci(r1, 0x0, 0x6) 17:26:47 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016275092a"], 0x6) 17:26:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010a1445002fd2ff04ab9fcb46b1063d30f6d7a3c94eafd8ecb0b7c09ef594f156b9dc8ac6aab34676d08eae706f"], 0x9) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1}) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xa) 17:26:47 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0xc) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000080)=0x100, 0x12) (async) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @disconn_phy_link={{0x437, 0x2}, {0xc9, 0x8}}}, 0x6) 17:26:47 executing program 2: ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x48a02) 17:26:47 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x128, 0x1403, 0x400, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) sendto$l2tp6(r0, 0x0, 0x0, 0x810, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x20) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x48, 0x0, 0x880dd7fc1fa2b608, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x40, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x2}, @free_buffer, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x49, 0x0, &(0x7f0000000400)="da96b9f2082f2d17ce3a9f6cf46380b86ea8414fc146feaf8da314369c0c1c40c930428a27dabbd4f50b59bd8152e7eba5ef5ae5364fc42a4bad1775949c36c802c3807f3ed3cd8d72"}) 17:26:47 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="668c7c03e2adf8831bf9194f710d6506000000abcd3e3c40a5"], 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xc}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, 0x1403, 0x400, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x84) 17:26:47 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @role_discovery={{0x809, 0x2}, {0xc9}}}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:47 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) bind$qrtr(r0, &(0x7f0000000200)={0x2a, 0x2, 0x4000}, 0xc) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x9, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000529bd7000fddbdf250600000008000600", @ANYRES32=r3, @ANYRESHEX=r4], 0x34}}, 0x30000000) write$bt_hci(r0, 0x0, 0x6) socket$qrtr(0x2a, 0x2, 0x0) 17:26:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="016675092a", @ANYRES16=r1], 0x6) 17:26:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="016675092a", @ANYRES16=r1], 0x6) 17:26:48 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) bind$qrtr(r0, &(0x7f0000000200)={0x2a, 0x2, 0x4000}, 0xc) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x9, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000529bd7000fddbdf250600000008000600", @ANYRES32=r3, @ANYRESHEX=r4], 0x34}}, 0x30000000) write$bt_hci(r0, 0x0, 0x6) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) bind$qrtr(r0, &(0x7f0000000200)={0x2a, 0x2, 0x4000}, 0xc) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x9, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000529bd7000fddbdf250600000008000600", @ANYRES32=r3, @ANYRESHEX=r4], 0x34}}, 0x30000000) (async) write$bt_hci(r0, 0x0, 0x6) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) 17:26:48 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x128, 0x1403, 0x400, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) sendto$l2tp6(r0, 0x0, 0x0, 0x810, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x20) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x48, 0x0, 0x880dd7fc1fa2b608, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x40, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x2}, @free_buffer, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x49, 0x0, &(0x7f0000000400)="da96b9f2082f2d17ce3a9f6cf46380b86ea8414fc146feaf8da314369c0c1c40c930428a27dabbd4f50b59bd8152e7eba5ef5ae5364fc42a4bad1775949c36c802c3807f3ed3cd8d72"}) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x128, 0x1403, 0x400, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) (async) sendto$l2tp6(r0, 0x0, 0x0, 0x810, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x20) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x48, 0x0, 0x880dd7fc1fa2b608, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x40, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x2}, @free_buffer, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x49, 0x0, &(0x7f0000000400)="da96b9f2082f2d17ce3a9f6cf46380b86ea8414fc146feaf8da314369c0c1c40c930428a27dabbd4f50b59bd8152e7eba5ef5ae5364fc42a4bad1775949c36c802c3807f3ed3cd8d72"}) (async) 17:26:48 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="668c7c03e2adf8831bf9194f710d6506000000abcd3e3c40a5"], 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xc}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, 0x1403, 0x400, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x84) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="668c7c03e2adf8831bf9194f710d6506000000abcd3e3c40a5"], 0xfffffdef) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xc}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, 0x1403, 0x400, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x84) (async) 17:26:48 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x40602) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:48 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000080)={0x1, @role_discovery={{0x809, 0x2}, {0xc9}}}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="016675092a", @ANYRES16=r1], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x6) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="016675092a", @ANYRES16=r1], 0x6) (async) 17:26:48 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x128, 0x1403, 0x400, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) sendto$l2tp6(r0, 0x0, 0x0, 0x810, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x20) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x48, 0x0, 0x880dd7fc1fa2b608, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x40, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x2}, @free_buffer, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x49, 0x0, &(0x7f0000000400)="da96b9f2082f2d17ce3a9f6cf46380b86ea8414fc146feaf8da314369c0c1c40c930428a27dabbd4f50b59bd8152e7eba5ef5ae5364fc42a4bad1775949c36c802c3807f3ed3cd8d72"}) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x128, 0x1403, 0x400, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) (async) sendto$l2tp6(r0, 0x0, 0x0, 0x810, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x20) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x48, 0x0, 0x880dd7fc1fa2b608, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x40, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x2}, @free_buffer, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x49, 0x0, &(0x7f0000000400)="da96b9f2082f2d17ce3a9f6cf46380b86ea8414fc146feaf8da314369c0c1c40c930428a27dabbd4f50b59bd8152e7eba5ef5ae5364fc42a4bad1775949c36c802c3807f3ed3cd8d72"}) (async) 17:26:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xe3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40011}, 0x20000810) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000140)) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01660000"], 0x6) 17:26:48 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) bind$qrtr(r0, &(0x7f0000000200)={0x2a, 0x2, 0x4000}, 0xc) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x9, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000529bd7000fddbdf250600000008000600", @ANYRES32=r3, @ANYRESHEX=r4], 0x34}}, 0x30000000) write$bt_hci(r0, 0x0, 0x6) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) bind$qrtr(r0, &(0x7f0000000200)={0x2a, 0x2, 0x4000}, 0xc) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x9, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000529bd7000fddbdf250600000008000600", @ANYRES32=r3, @ANYRESHEX=r4], 0x34}}, 0x30000000) (async) write$bt_hci(r0, 0x0, 0x6) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) 17:26:48 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x40602) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:48 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="668c7c03e2adf8831bf9194f710d6506000000abcd3e3c40a5"], 0xfffffdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xc}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, 0x1403, 0x400, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x84) 17:26:48 executing program 4: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) 17:26:48 executing program 4: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) 17:26:48 executing program 4: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) 17:26:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:26:48 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x40602) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:48 executing program 2: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000000)={0xffffffff95c0118c, 0x80000000, 0x80000001, 0x7}) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0xa4a00) 17:26:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xe3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40011}, 0x20000810) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000140)) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01660000"], 0x6) 17:26:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 17:26:48 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000012124b412cdc27d0bc7d17a2e871923aba470a7e843149f1c53603d0566560f0de31f5080d896f42bfe86f86463b41d12d7118aa48f254ccfc68bf032c60fa2ef316a02203ca0e45d119c7377d4ba25285482c49520b28a824972e605c1bbb372d58fb57f71e431129a82a8f5feb8f084b93cd20003a21dd74addd51d6aa82f44036ae9b361ff99ba3dc6131a792c8c6c92209de136a000000000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000500000006001c00000000000800180000000000"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22902080}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2ec8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 17:26:48 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000005dce221b71f37ee4774c6034934b889"], 0xa) 17:26:48 executing program 2: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000000)={0xffffffff95c0118c, 0x80000000, 0x80000001, 0x7}) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0xa4a00) 17:26:48 executing program 2: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000000)={0xffffffff95c0118c, 0x80000000, 0x80000001, 0x7}) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0xa4a00) 17:26:48 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 17:26:48 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01ef130500000000007620eac9eff23dc1ea99d48febaae98d41398169562c1a360100000000000080ffff0b80f3812ff8b507b91efb0ac7c46d4f9498f081ad"], 0x9) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0xfffff001, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:26:48 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 17:26:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xe3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40011}, 0x20000810) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000140)) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01660000"], 0x6) 17:26:48 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000012124b412cdc27d0bc7d17a2e871923aba470a7e843149f1c53603d0566560f0de31f5080d896f42bfe86f86463b41d12d7118aa48f254ccfc68bf032c60fa2ef316a02203ca0e45d119c7377d4ba25285482c49520b28a824972e605c1bbb372d58fb57f71e431129a82a8f5feb8f084b93cd20003a21dd74addd51d6aa82f44036ae9b361ff99ba3dc6131a792c8c6c92209de136a000000000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000500000006001c00000000000800180000000000"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22902080}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2ec8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, 0x0, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000012124b412cdc27d0bc7d17a2e871923aba470a7e843149f1c53603d0566560f0de31f5080d896f42bfe86f86463b41d12d7118aa48f254ccfc68bf032c60fa2ef316a02203ca0e45d119c7377d4ba25285482c49520b28a824972e605c1bbb372d58fb57f71e431129a82a8f5feb8f084b93cd20003a21dd74addd51d6aa82f44036ae9b361ff99ba3dc6131a792c8c6c92209de136a000000000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000500000006001c00000000000800180000000000"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22902080}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2ec8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) 17:26:48 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000005dce221b71f37ee4774c6034934b889"], 0xa) 17:26:48 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01ef130500000000007620eac9eff23dc1ea99d48febaae98d41398169562c1a360100000000000080ffff0b80f3812ff8b507b91efb0ac7c46d4f9498f081ad"], 0x9) (async) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0xfffff001, 0x4) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (rerun: 64) 17:26:48 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000005dce221b71f37ee4774c6034934b889"], 0xa) 17:26:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x1) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffff9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}, @release={0x40046306, 0x2}, @release={0x40046306, 0x3}], 0xac, 0x0, &(0x7f0000000140)="57a28bbc47792e3c6e1c2a10a601b9042f0e8040881488f4120715fec0bf33aca3125676e0f83e3186aee001e645dc19eebad9955e5996cc352ca3bf090ff09b8103cdc3c378582feaa85b21b7c7521c09659db07e86d33ef1602f3fd4f16bf7d5b5420fa28cdca02eff6364c5227e38f3673d5e5edbc4f5d8c0c754a087d3a2ed4a1c1a4789504c9ceab6e9f2c211111962668557fa8ac925b2116869e700425abc03053afe146182080158"}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:48 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000012124b412cdc27d0bc7d17a2e871923aba470a7e843149f1c53603d0566560f0de31f5080d896f42bfe86f86463b41d12d7118aa48f254ccfc68bf032c60fa2ef316a02203ca0e45d119c7377d4ba25285482c49520b28a824972e605c1bbb372d58fb57f71e431129a82a8f5feb8f084b93cd20003a21dd74addd51d6aa82f44036ae9b361ff99ba3dc6131a792c8c6c92209de136a000000000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000500000006001c00000000000800180000000000"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22902080}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2ec8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 17:26:48 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8c03567274a49bf5728ee1310c71221d49d3b208a1bbfb2dbaedc15bfc23f279e6354837d6587a9ff9e05672"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:48 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 17:26:48 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000, 0x10000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x1) (async) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffff9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}, @release={0x40046306, 0x2}, @release={0x40046306, 0x3}], 0xac, 0x0, &(0x7f0000000140)="57a28bbc47792e3c6e1c2a10a601b9042f0e8040881488f4120715fec0bf33aca3125676e0f83e3186aee001e645dc19eebad9955e5996cc352ca3bf090ff09b8103cdc3c378582feaa85b21b7c7521c09659db07e86d33ef1602f3fd4f16bf7d5b5420fa28cdca02eff6364c5227e38f3673d5e5edbc4f5d8c0c754a087d3a2ed4a1c1a4789504c9ceab6e9f2c211111962668557fa8ac925b2116869e700425abc03053afe146182080158"}) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (rerun: 64) 17:26:48 executing program 2: socketpair(0x2a, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x72, 0x1}, 0x20) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:48 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8c03567274a49bf5728ee1310c71221d49d3b208a1bbfb2dbaedc15bfc23f279e6354837d6587a9ff9e05672"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:48 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r2, 0x25, 0xc}, 0x10) write$bt_hci(r0, 0x0, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) 17:26:48 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8c03567274a49bf5728ee1310c71221d49d3b208a1bbfb2dbaedc15bfc23f279e6354837d6587a9ff9e05672"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8c03567274a49bf5728ee1310c71221d49d3b208a1bbfb2dbaedc15bfc23f279e6354837d6587a9ff9e05672"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:49 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01ef130500000000007620eac9eff23dc1ea99d48febaae98d41398169562c1a360100000000000080ffff0b80f3812ff8b507b91efb0ac7c46d4f9498f081ad"], 0x9) (async, rerun: 32) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0xfffff001, 0x4) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:49 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r2, 0x25, 0xc}, 0x10) (async) write$bt_hci(r0, 0x0, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) 17:26:49 executing program 2: socketpair(0x2a, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x72, 0x1}, 0x20) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:49 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x1) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffff9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}, @release={0x40046306, 0x2}, @release={0x40046306, 0x3}], 0xac, 0x0, &(0x7f0000000140)="57a28bbc47792e3c6e1c2a10a601b9042f0e8040881488f4120715fec0bf33aca3125676e0f83e3186aee001e645dc19eebad9955e5996cc352ca3bf090ff09b8103cdc3c378582feaa85b21b7c7521c09659db07e86d33ef1602f3fd4f16bf7d5b5420fa28cdca02eff6364c5227e38f3673d5e5edbc4f5d8c0c754a087d3a2ed4a1c1a4789504c9ceab6e9f2c211111962668557fa8ac925b2116869e700425abc03053afe146182080158"}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x1) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffff9) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}, @release={0x40046306, 0x2}, @release={0x40046306, 0x3}], 0xac, 0x0, &(0x7f0000000140)="57a28bbc47792e3c6e1c2a10a601b9042f0e8040881488f4120715fec0bf33aca3125676e0f83e3186aee001e645dc19eebad9955e5996cc352ca3bf090ff09b8103cdc3c378582feaa85b21b7c7521c09659db07e86d33ef1602f3fd4f16bf7d5b5420fa28cdca02eff6364c5227e38f3673d5e5edbc4f5d8c0c754a087d3a2ed4a1c1a4789504c9ceab6e9f2c211111962668557fa8ac925b2116869e700425abc03053afe146182080158"}) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) 17:26:49 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000, 0x10000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000, 0x10000) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) (async) 17:26:49 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x20) 17:26:49 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaa1500e0d9b33630937dcc1588ff49918f83a939788f2a91a8606933f6e0ff5877fd9dd81c96214aafcc0ea602d4d6fd57ce3a0ce8c2fcd469da5734183ee90c6907f17dd3b3a149a190352f99ac8e7a39b5d516f52ecd6677b8e1b390f734114017462907d737497447eb0febf0cf95d535c959f48cd6b0"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendto$isdn(r1, &(0x7f0000000140)={0x200, 0x2, "e4bef650b0589e455b90fba45ad94ed44f51cfc7fa455d735cacabd2e3da909206e069a2a3af79c1ed075ed61fbbe3f1da244cdd999a14e659ecdd5a5117bb75869d6e733f6a9ba2288325751b8c"}, 0x56, 0x4000000, &(0x7f0000000040)={0x22, 0x4, 0x5, 0x10}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x0, 0x101, "fe8844", 0x9, 0x9}) 17:26:49 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r2, 0x25, 0xc}, 0x10) write$bt_hci(r0, 0x0, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) (async) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r2, 0x25, 0xc}, 0x10) (async) write$bt_hci(r0, 0x0, 0x6) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 17:26:49 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) syz_open_dev$vcsu(&(0x7f0000000000), 0x100000000, 0x10000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:26:49 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x2b, 0x0, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406a9aaaaaaaa00"], 0xfffffdef) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000140)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) 17:26:49 executing program 2: socketpair(0x2a, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x72, 0x1}, 0x20) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:49 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (rerun: 64) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x20) 17:26:49 executing program 3: write$bt_hci(0xffffffffffffffff, 0x0, 0x6) 17:26:49 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x2b, 0x0, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406a9aaaaaaaa00"], 0xfffffdef) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000140)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socketpair(0x2b, 0x0, 0x9, &(0x7f0000000080)) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406a9aaaaaaaa00"], 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r2, &(0x7f0000000140)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) 17:26:49 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x20) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x20) (async) 17:26:49 executing program 1: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x1407, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x4}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40804}, 0x10000080) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x10}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x74}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x8004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="244651ec40e286bee9d906035458318e000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000500000006001c00000000000800180000000000"], 0x24}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendto$l2tp6(r1, &(0x7f0000000080)=')', 0x1, 0x4000000, &(0x7f00000000c0)={0xa, 0x0, 0x9ab, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4, 0x4}, 0x20) write$bt_hci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01210406aaaa9faaaa00669d0dd74290e33c66ae96e83f464c57be4e434926df01000100e9612dc0bfd574ec5172493e80380438ac9dcaf7098551a661f127fec7df7615e7814e81b57e984727ec2efa5070cd9b3d05bf2618d4d060f65fa90dfaf908bc77908631cca18f2e2e3396a7e376918a217e256c7b0ee98b4af7a0aff816ee38a76d8a394a1eddf00f1a03d012d34573699ae2274e193eaa150b5f9a0af21469c219f134"], 0xfffffdef) r7 = syz_open_dev$loop(&(0x7f00000004c0), 0x1, 0x40) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000500)) 17:26:49 executing program 3: write$bt_hci(0xffffffffffffffff, 0x0, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) (async) 17:26:49 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaa1500e0d9b33630937dcc1588ff49918f83a939788f2a91a8606933f6e0ff5877fd9dd81c96214aafcc0ea602d4d6fd57ce3a0ce8c2fcd469da5734183ee90c6907f17dd3b3a149a190352f99ac8e7a39b5d516f52ecd6677b8e1b390f734114017462907d737497447eb0febf0cf95d535c959f48cd6b0"], 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendto$isdn(r1, &(0x7f0000000140)={0x200, 0x2, "e4bef650b0589e455b90fba45ad94ed44f51cfc7fa455d735cacabd2e3da909206e069a2a3af79c1ed075ed61fbbe3f1da244cdd999a14e659ecdd5a5117bb75869d6e733f6a9ba2288325751b8c"}, 0x56, 0x4000000, &(0x7f0000000040)={0x22, 0x4, 0x5, 0x10}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x0, 0x101, "fe8844", 0x9, 0x9}) 17:26:49 executing program 2: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r0 = io_uring_setup(0x7466, &(0x7f0000000000)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) 17:26:49 executing program 3: write$bt_hci(0xffffffffffffffff, 0x0, 0x6) 17:26:49 executing program 2: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r0 = io_uring_setup(0x7466, &(0x7f0000000000)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) (async) io_uring_setup(0x7466, &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) (async) 17:26:49 executing program 2: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) (async) r0 = io_uring_setup(0x7466, &(0x7f0000000000)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) 17:26:49 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000340)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xeffffffa}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x80000000, 0xe3, &(0x7f00000000c0)=""/227, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000380)={0x6, 0x5, 0x0, [{0x400, 0x6, 0x1, 0x7, 0x9, 0x0, 0x8, '\x00', 0x8000}, {0x9, 0xfffffffffffffffa, 0x80000000, 0x48, 0x4, 0xfb, 0x0, '\x00', 0x1}, {0x2, 0x5f, 0x9, 0x0, 0x8, 0x7, 0x0, '\x00', 0x9}, {0x401, 0x3f, 0x101, 0x79, 0x81, 0x4, 0x15, '\x00', 0x8000}, {0x1000, 0x9ce, 0x5, 0x0, 0x2e, 0x0, 0x7f, '\x00', 0x2f}]}) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8, 0x109800) openat$cgroup_subtree(r2, &(0x7f0000000280), 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) write$bt_hci(r3, 0x0, 0xfc8f) syz_open_dev$vcsu(&(0x7f00000002c0), 0x1, 0x180) 17:26:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000040), &(0x7f0000000200)=0x6e) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="65727370616e304000000000000000002a3cd5a648930f455b7736264504aaed75e6a29cd097523d57f786a6ff42206780dfc6d3093e4d98954db599b20fcf0d80ff70e31b5a5086e96e54c7f15ccb624899ae9e6d3e2d2ec2d21e4d8f46cbac62f8aa245e69be947824f39fed1cf0c17d7450c0b2bdd221e65c35ab9df49ba935e90271ad8a7c4afce7c5163597797f12b3273119c665c12cd2135cd5044fe97f2c82851bdf403f3c7a340553fe45810a77bb96ff96a799678addba24aab05124dcd9ea5a1f1272111e81dd87202cf36245be75f31d49624193e0f06c618925fbd38259758897da4523", @ANYRES32=0x0, @ANYBLOB="008000080000000800000008410e004400660000042f9078e0000002ac1e0001442ccf0000000494000000010000009b0000000600006fcb000000020000000500000200000000060000008094040100"]}) getpeername$unix(r0, &(0x7f0000000180), &(0x7f0000000140)=0x6e) 17:26:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async, rerun: 32) socket$unix(0x1, 0x5, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000040), &(0x7f0000000200)=0x6e) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="65727370616e304000000000000000002a3cd5a648930f455b7736264504aaed75e6a29cd097523d57f786a6ff42206780dfc6d3093e4d98954db599b20fcf0d80ff70e31b5a5086e96e54c7f15ccb624899ae9e6d3e2d2ec2d21e4d8f46cbac62f8aa245e69be947824f39fed1cf0c17d7450c0b2bdd221e65c35ab9df49ba935e90271ad8a7c4afce7c5163597797f12b3273119c665c12cd2135cd5044fe97f2c82851bdf403f3c7a340553fe45810a77bb96ff96a799678addba24aab05124dcd9ea5a1f1272111e81dd87202cf36245be75f31d49624193e0f06c618925fbd38259758897da4523", @ANYRES32=0x0, @ANYBLOB="008000080000000800000008410e004400660000042f9078e0000002ac1e0001442ccf0000000494000000010000009b0000000600006fcb000000020000000500000200000000060000008094040100"]}) (async) getpeername$unix(r0, &(0x7f0000000180), &(0x7f0000000140)=0x6e) 17:26:49 executing program 1: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x1407, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x4}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40804}, 0x10000080) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x10}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x74}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x8004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="244651ec40e286bee9d906035458318e000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000500000006001c00000000000800180000000000"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendto$l2tp6(r1, &(0x7f0000000080)=')', 0x1, 0x4000000, &(0x7f00000000c0)={0xa, 0x0, 0x9ab, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4, 0x4}, 0x20) (async) write$bt_hci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01210406aaaa9faaaa00669d0dd74290e33c66ae96e83f464c57be4e434926df01000100e9612dc0bfd574ec5172493e80380438ac9dcaf7098551a661f127fec7df7615e7814e81b57e984727ec2efa5070cd9b3d05bf2618d4d060f65fa90dfaf908bc77908631cca18f2e2e3396a7e376918a217e256c7b0ee98b4af7a0aff816ee38a76d8a394a1eddf00f1a03d012d34573699ae2274e193eaa150b5f9a0af21469c219f134"], 0xfffffdef) (async) r7 = syz_open_dev$loop(&(0x7f00000004c0), 0x1, 0x40) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000500)) 17:26:49 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x2b, 0x0, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406a9aaaaaaaa00"], 0xfffffdef) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000140)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socketpair(0x2b, 0x0, 0x9, &(0x7f0000000080)) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406a9aaaaaaaa00"], 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r2, &(0x7f0000000140)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) 17:26:49 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000080), 0x1ff, 0x800) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000040), &(0x7f0000000200)=0x6e) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="65727370616e304000000000000000002a3cd5a648930f455b7736264504aaed75e6a29cd097523d57f786a6ff42206780dfc6d3093e4d98954db599b20fcf0d80ff70e31b5a5086e96e54c7f15ccb624899ae9e6d3e2d2ec2d21e4d8f46cbac62f8aa245e69be947824f39fed1cf0c17d7450c0b2bdd221e65c35ab9df49ba935e90271ad8a7c4afce7c5163597797f12b3273119c665c12cd2135cd5044fe97f2c82851bdf403f3c7a340553fe45810a77bb96ff96a799678addba24aab05124dcd9ea5a1f1272111e81dd87202cf36245be75f31d49624193e0f06c618925fbd38259758897da4523", @ANYRES32=0x0, @ANYBLOB="008000080000000800000008410e004400660000042f9078e0000002ac1e0001442ccf0000000494000000010000009b0000000600006fcb000000020000000500000200000000060000008094040100"]}) getpeername$unix(r0, &(0x7f0000000180), &(0x7f0000000140)=0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) socket$unix(0x1, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) accept$unix(r1, &(0x7f0000000040), &(0x7f0000000200)=0x6e) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="65727370616e304000000000000000002a3cd5a648930f455b7736264504aaed75e6a29cd097523d57f786a6ff42206780dfc6d3093e4d98954db599b20fcf0d80ff70e31b5a5086e96e54c7f15ccb624899ae9e6d3e2d2ec2d21e4d8f46cbac62f8aa245e69be947824f39fed1cf0c17d7450c0b2bdd221e65c35ab9df49ba935e90271ad8a7c4afce7c5163597797f12b3273119c665c12cd2135cd5044fe97f2c82851bdf403f3c7a340553fe45810a77bb96ff96a799678addba24aab05124dcd9ea5a1f1272111e81dd87202cf36245be75f31d49624193e0f06c618925fbd38259758897da4523", @ANYRES32=0x0, @ANYBLOB="008000080000000800000008410e004400660000042f9078e0000002ac1e0001442ccf0000000494000000010000009b0000000600006fcb000000020000000500000200000000060000008094040100"]}) (async) getpeername$unix(r0, &(0x7f0000000180), &(0x7f0000000140)=0x6e) (async) 17:26:49 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaa1500e0d9b33630937dcc1588ff49918f83a939788f2a91a8606933f6e0ff5877fd9dd81c96214aafcc0ea602d4d6fd57ce3a0ce8c2fcd469da5734183ee90c6907f17dd3b3a149a190352f99ac8e7a39b5d516f52ecd6677b8e1b390f734114017462907d737497447eb0febf0cf95d535c959f48cd6b0"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendto$isdn(r1, &(0x7f0000000140)={0x200, 0x2, "e4bef650b0589e455b90fba45ad94ed44f51cfc7fa455d735cacabd2e3da909206e069a2a3af79c1ed075ed61fbbe3f1da244cdd999a14e659ecdd5a5117bb75869d6e733f6a9ba2288325751b8c"}, 0x56, 0x4000000, &(0x7f0000000040)={0x22, 0x4, 0x5, 0x10}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x0, 0x101, "fe8844", 0x9, 0x9}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0406aaaaaaaa1500e0d9b33630937dcc1588ff49918f83a939788f2a91a8606933f6e0ff5877fd9dd81c96214aafcc0ea602d4d6fd57ce3a0ce8c2fcd469da5734183ee90c6907f17dd3b3a149a190352f99ac8e7a39b5d516f52ecd6677b8e1b390f734114017462907d737497447eb0febf0cf95d535c959f48cd6b0"], 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendto$isdn(r1, &(0x7f0000000140)={0x200, 0x2, "e4bef650b0589e455b90fba45ad94ed44f51cfc7fa455d735cacabd2e3da909206e069a2a3af79c1ed075ed61fbbe3f1da244cdd999a14e659ecdd5a5117bb75869d6e733f6a9ba2288325751b8c"}, 0x56, 0x4000000, &(0x7f0000000040)={0x22, 0x4, 0x5, 0x10}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x0, 0x101, "fe8844", 0x9, 0x9}) (async) 17:26:49 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000340)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xeffffffa}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x80000000, 0xe3, &(0x7f00000000c0)=""/227, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (rerun: 32) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000380)={0x6, 0x5, 0x0, [{0x400, 0x6, 0x1, 0x7, 0x9, 0x0, 0x8, '\x00', 0x8000}, {0x9, 0xfffffffffffffffa, 0x80000000, 0x48, 0x4, 0xfb, 0x0, '\x00', 0x1}, {0x2, 0x5f, 0x9, 0x0, 0x8, 0x7, 0x0, '\x00', 0x9}, {0x401, 0x3f, 0x101, 0x79, 0x81, 0x4, 0x15, '\x00', 0x8000}, {0x1000, 0x9ce, 0x5, 0x0, 0x2e, 0x0, 0x7f, '\x00', 0x2f}]}) (async, rerun: 32) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8, 0x109800) (rerun: 32) openat$cgroup_subtree(r2, &(0x7f0000000280), 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) write$bt_hci(r3, 0x0, 0xfc8f) (async, rerun: 64) syz_open_dev$vcsu(&(0x7f00000002c0), 0x1, 0x180) (rerun: 64) 17:26:49 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:49 executing program 1: setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x1407, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x4}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40804}, 0x10000080) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x10}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x74}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x8004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="244651ec40e286bee9d906035458318e000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000500000006001c00000000000800180000000000"], 0x24}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendto$l2tp6(r1, &(0x7f0000000080)=')', 0x1, 0x4000000, &(0x7f00000000c0)={0xa, 0x0, 0x9ab, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4, 0x4}, 0x20) (async) write$bt_hci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01210406aaaa9faaaa00669d0dd74290e33c66ae96e83f464c57be4e434926df01000100e9612dc0bfd574ec5172493e80380438ac9dcaf7098551a661f127fec7df7615e7814e81b57e984727ec2efa5070cd9b3d05bf2618d4d060f65fa90dfaf908bc77908631cca18f2e2e3396a7e376918a217e256c7b0ee98b4af7a0aff816ee38a76d8a394a1eddf00f1a03d012d34573699ae2274e193eaa150b5f9a0af21469c219f134"], 0xfffffdef) r7 = syz_open_dev$loop(&(0x7f00000004c0), 0x1, 0x40) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000500)) 17:26:49 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x1ff, 0x800) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:49 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000340)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xeffffffa}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x80000000, 0xe3, &(0x7f00000000c0)=""/227, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (rerun: 32) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000380)={0x6, 0x5, 0x0, [{0x400, 0x6, 0x1, 0x7, 0x9, 0x0, 0x8, '\x00', 0x8000}, {0x9, 0xfffffffffffffffa, 0x80000000, 0x48, 0x4, 0xfb, 0x0, '\x00', 0x1}, {0x2, 0x5f, 0x9, 0x0, 0x8, 0x7, 0x0, '\x00', 0x9}, {0x401, 0x3f, 0x101, 0x79, 0x81, 0x4, 0x15, '\x00', 0x8000}, {0x1000, 0x9ce, 0x5, 0x0, 0x2e, 0x0, 0x7f, '\x00', 0x2f}]}) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8, 0x109800) openat$cgroup_subtree(r2, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) write$bt_hci(r3, 0x0, 0xfc8f) (async) syz_open_dev$vcsu(&(0x7f00000002c0), 0x1, 0x180) 17:26:49 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000040000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:49 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3c9, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1401, 0x8, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 17:26:49 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000080), 0x1ff, 0x800) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x1ff, 0x800) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:49 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000c0c61b8e76b30633486df24606fda15b000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:49 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000040000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:49 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:49 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406aaaa962cc65baaaaaa00f223f860b8701bb7216be535e59e1c294695c257fc4db95d2ebf7a276cab9beae24fc8aceb63e8175d25f6090cc11bbfc5721113840e2b867d555ec79cf9baffccd3644cf5a46d0948457c84a390c40d33dc167e1aae8e1f384e2cd4ff03ffa1afd269bd334dd7caff2c16d4e513da827d6f9bc0"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:49 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3c9, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1401, 0x8, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 17:26:49 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x140a, 0x2, 0x4, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040001) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffff7, 0x2000) write$cgroup_int(r1, &(0x7f0000000200), 0x12) 17:26:49 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3c9, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1401, 0x8, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 17:26:49 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:49 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406aaaa962cc65baaaaaa00f223f860b8701bb7216be535e59e1c294695c257fc4db95d2ebf7a276cab9beae24fc8aceb63e8175d25f6090cc11bbfc5721113840e2b867d555ec79cf9baffccd3644cf5a46d0948457c84a390c40d33dc167e1aae8e1f384e2cd4ff03ffa1afd269bd334dd7caff2c16d4e513da827d6f9bc0"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:49 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000c0c61b8e76b30633486df24606fda15b000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000c0c61b8e76b30633486df24606fda15b000000"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) 17:26:49 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000040000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:50 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000c0c61b8e76b30633486df24606fda15b000000"], 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:50 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x140a, 0x2, 0x4, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040001) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffff7, 0x2000) write$cgroup_int(r1, &(0x7f0000000200), 0x12) 17:26:50 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x1fa7f407, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) 17:26:50 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0xffffffffffff8000, 0x1, 0xfffffffc, 0x5}) syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffffd83a, 0x200000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x3, 0x8b, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x1, 0x3, 0x5}}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xd92, 0x210602) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000001c0)={0x800, 0x4b, 0x0, [{0xffffffffffffff80, 0x8, 0xffffe, 0x4, 0x0, 0xfc, 0x7f, '\x00', 0xc}, {0x6, 0x8, 0x1, 0x97, 0x0, 0x2, 0x81, '\x00', 0x7db25354}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000002c0)) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r1, 0x29, 0x1, 0x3, 0x7, 0x11, @loopback, @private2, 0x8, 0x40, 0xf966, 0x81}}) 17:26:50 executing program 1: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54288ad2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a7e27f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5be6a191}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872bad3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x488af009}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce5fa14}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cb552ad}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x835b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18d18354}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3492}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1aa6ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x815b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c33cee6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5a35e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56c3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5ffca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616bded1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fc9a862}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x200bd25d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d06772}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}]}]}, 0x1a4}}, 0x8085) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0130950000aaaaaaaa00"], 0xfffffdef) 17:26:50 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="010c0406aaaa962cc65baaaaaa00f223f860b8701bb7216be535e59e1c294695c257fc4db95d2ebf7a276cab9beae24fc8aceb63e8175d25f6090cc11bbfc5721113840e2b867d555ec79cf9baffccd3644cf5a46d0948457c84a390c40d33dc167e1aae8e1f384e2cd4ff03ffa1afd269bd334dd7caff2c16d4e513da827d6f9bc0"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:50 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000080)={0x1, @exit_sniff_mode={{0x804, 0xffffffffffffff49}, {0xc9}}}, 0x6) 17:26:50 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x140a, 0x2, 0x4, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040001) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffff7, 0x2000) write$cgroup_int(r1, &(0x7f0000000200), 0x12) 17:26:50 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0xffffffffffff8000, 0x1, 0xfffffffc, 0x5}) syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffffd83a, 0x200000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x3, 0x8b, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x1, 0x3, 0x5}}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xd92, 0x210602) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000001c0)={0x800, 0x4b, 0x0, [{0xffffffffffffff80, 0x8, 0xffffe, 0x4, 0x0, 0xfc, 0x7f, '\x00', 0xc}, {0x6, 0x8, 0x1, 0x97, 0x0, 0x2, 0x81, '\x00', 0x7db25354}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000002c0)) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r1, 0x29, 0x1, 0x3, 0x7, 0x11, @loopback, @private2, 0x8, 0x40, 0xf966, 0x81}}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0xffffffffffff8000, 0x1, 0xfffffffc, 0x5}) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffffd83a, 0x200000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x3, 0x8b, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x1, 0x3, 0x5}}) (async) syz_open_dev$loop(&(0x7f0000000180), 0xd92, 0x210602) (async) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000001c0)={0x800, 0x4b, 0x0, [{0xffffffffffffff80, 0x8, 0xffffe, 0x4, 0x0, 0xfc, 0x7f, '\x00', 0xc}, {0x6, 0x8, 0x1, 0x97, 0x0, 0x2, 0x81, '\x00', 0x7db25354}]}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000002c0)) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r1, 0x29, 0x1, 0x3, 0x7, 0x11, @loopback, @private2, 0x8, 0x40, 0xf966, 0x81}}) (async) 17:26:50 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) socketpair(0x2c, 0x80000, 0x80, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) 17:26:50 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x1fa7f407, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, 0x0, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x1fa7f407, 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) (async) 17:26:50 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000080)={0x1, @exit_sniff_mode={{0x804, 0xffffffffffffff49}, {0xc9}}}, 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @exit_sniff_mode={{0x804, 0xffffffffffffff49}, {0xc9}}}, 0x6) (async) 17:26:50 executing program 1: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54288ad2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a7e27f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5be6a191}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872bad3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x488af009}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce5fa14}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cb552ad}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x835b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18d18354}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3492}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1aa6ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x815b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c33cee6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5a35e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56c3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5ffca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616bded1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fc9a862}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x200bd25d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d06772}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}]}]}, 0x1a4}}, 0x8085) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0130950000aaaaaaaa00"], 0xfffffdef) 17:26:50 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x1fa7f407, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, 0x0, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x1fa7f407, 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) (async) 17:26:50 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0xffffffffffff8000, 0x1, 0xfffffffc, 0x5}) syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffffd83a, 0x200000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x3, 0x8b, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x1, 0x3, 0x5}}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xd92, 0x210602) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000001c0)={0x800, 0x4b, 0x0, [{0xffffffffffffff80, 0x8, 0xffffe, 0x4, 0x0, 0xfc, 0x7f, '\x00', 0xc}, {0x6, 0x8, 0x1, 0x97, 0x0, 0x2, 0x81, '\x00', 0x7db25354}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000002c0)) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r1, 0x29, 0x1, 0x3, 0x7, 0x11, @loopback, @private2, 0x8, 0x40, 0xf966, 0x81}}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0xffffffffffff8000, 0x1, 0xfffffffc, 0x5}) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffffffffd83a, 0x200000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x3, 0x8b, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x1, 0x3, 0x5}}) (async) syz_open_dev$loop(&(0x7f0000000180), 0xd92, 0x210602) (async) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000001c0)={0x800, 0x4b, 0x0, [{0xffffffffffffff80, 0x8, 0xffffe, 0x4, 0x0, 0xfc, 0x7f, '\x00', 0xc}, {0x6, 0x8, 0x1, 0x97, 0x0, 0x2, 0x81, '\x00', 0x7db25354}]}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000002c0)) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r1, 0x29, 0x1, 0x3, 0x7, 0x11, @loopback, @private2, 0x8, 0x40, 0xf966, 0x81}}) (async) 17:26:50 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000080)={0x1, @exit_sniff_mode={{0x804, 0xffffffffffffff49}, {0xc9}}}, 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @exit_sniff_mode={{0x804, 0xffffffffffffff49}, {0xc9}}}, 0x6) (async) 17:26:50 executing program 1: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54288ad2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a7e27f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5be6a191}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7872bad3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x488af009}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce5fa14}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cb552ad}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x835b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18d18354}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3492}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1aa6ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x815b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c33cee6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5a35e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56c3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5ffca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x616bded1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fc9a862}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x200bd25d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d06772}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}]}]}, 0x1a4}}, 0x8085) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0130950000aaaaaaaa00"], 0xfffffdef) 17:26:50 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x200a80) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:50 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) socketpair(0x2c, 0x80000, 0x80, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) socketpair(0x2c, 0x80000, 0x80, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) (async) 17:26:50 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x200a80) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x200a80) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:50 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x200a80) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x200a80) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:50 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xff7a) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:50 executing program 1: socketpair(0x2a, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, 0x0, 0x6) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x17c, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/42, 0x2a, 0x2, 0x38}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x1, 0x16}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x201, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/1, 0x1, 0x1, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/128, 0x80, 0x1, 0x11}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x5, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x3c}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/172, 0xac, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/183, 0xb7, 0x2, 0x32}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x1}, @free_buffer, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x6b, 0x0, &(0x7f0000000880)="25623501bc4cb9d8dfb3bd2955a5d666a2ac4e3e0aec2cbe8d0337d36dea2cdb549f54a88a6fd2afebcd16b126e1b0056d264ba5fcfcf8a0b37b4c4502005bfa3d33f4dc63e2c0fc6c0b165d4ec1758e4ae6c8edef794c37ee65e1599dd598fdbb782460406131ef73a71d"}) 17:26:50 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) socketpair(0x2c, 0x80000, 0x80, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) 17:26:50 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) 17:26:50 executing program 3: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x10000000005, 0x5cf402) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f0000000140)=""/70, 0x46, 0x10000, &(0x7f00000001c0), 0x20) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000003c0)={0x0, {}, 0x0, {}, 0xffff, 0xa, 0x15, 0x8, "a7f4c6a25002a5ef1c9ef6eca0ad1a2a70f549f8925b79d7a911f3b8447c072c1b08f4bef14f229d3c523d6c8f24f3e6fc1c1e5a6d2edf895d3e70469504434d", "7d6e5b0c5f17fd96a341da690e554a674754f8e76d7082b66e4135d0a4085d0f", [0xfffffffffffff801, 0x6]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="85373da60037f703f4ec613995010000000000000000000500000006001c000000000008001800000000008f587f2f9fda5310cbca271a1c435c623955452e522000000000"], 0x24}}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000240), 0x8, 0x402000) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r8, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x5b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="f88c28bd7000ffdbdf250700000006001a004e24000006001c000100000008000a000400000005000d000000000008000a000400000008001700", @ANYRES32=r6, @ANYBLOB="e78d1f0020010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4) write$bt_hci(r0, 0x0, 0x6) 17:26:50 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x3, 0xffff, {{0x20, 0x4, 0x0, 0x2d, 0x80, 0x65, 0x0, 0xb0, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@rr={0x7, 0x17, 0xa5, [@rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x5, [0x9, 0x5]}, @lsrr={0x83, 0x1f, 0xb0, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @empty, @local, @broadcast, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0xa, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1f}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xaba}]}, @end]}}}}}) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:50 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xff7a) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:50 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000001640)=ANY=[@ANYBLOB="3e0f909149c2d1b3369e2d4cc0e686a848a519340700000000000000697f9774b9d1e4d0d3a5d5b0beecceddde93251df7b553bf68d18c645e849ad8c1ac7b83266f6e6451d4286df089a4556b635b1455b5510b"], 0x9) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaa00070000000000"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000200)={0x1, @le_create_cis={{0x2064, 0x5}, {0x1, [{0x8, 0x8}]}}}, 0x9) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000380)=0x80, 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1407, 0x10, 0x70bd28, 0x25dfdc00, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r4 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r5) shmctl$SHM_STAT(r4, 0xd, &(0x7f00000003c0)=""/4096) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0xc223014}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 17:26:50 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x3, 0xffff, {{0x20, 0x4, 0x0, 0x2d, 0x80, 0x65, 0x0, 0xb0, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@rr={0x7, 0x17, 0xa5, [@rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x5, [0x9, 0x5]}, @lsrr={0x83, 0x1f, 0xb0, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @empty, @local, @broadcast, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0xa, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1f}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xaba}]}, @end]}}}}}) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:50 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000001640)=ANY=[@ANYBLOB="3e0f909149c2d1b3369e2d4cc0e686a848a519340700000000000000697f9774b9d1e4d0d3a5d5b0beecceddde93251df7b553bf68d18c645e849ad8c1ac7b83266f6e6451d4286df089a4556b635b1455b5510b"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaa00070000000000"], 0xfffffdef) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 64) write$bt_hci(r1, &(0x7f0000000200)={0x1, @le_create_cis={{0x2064, 0x5}, {0x1, [{0x8, 0x8}]}}}, 0x9) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000380)=0x80, 0x4) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1407, 0x10, 0x70bd28, 0x25dfdc00, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r4 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r5) (async, rerun: 32) shmctl$SHM_STAT(r4, 0xd, &(0x7f00000003c0)=""/4096) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0xc223014}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async, rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (rerun: 32) 17:26:50 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xff7a) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:50 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) (async) 17:26:50 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x6) 17:26:50 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000140)="e3a8ae66be8008c748b7d176c4290ed0450de6df97e940e43a6c21ba7ede1f0ce3743a278cbaff508be04fa4e936d3ae6f173fcf942e8b02373c1127f9d5bd887cbbc3a8fbd21f59314ddd0d52f9d381207d437d0d764b52343b9ea756c353124552fd20a5e049a62dc771b52b7a966bf9b4a23c68efdf7bc36350454a30a99d5f14aa3325ee16bbd2db53f2e55b63159bbd4c9ef94ec6987b3c9ad1399d8ab2b9ad198c6fd536ca62596aec3bd03f56cf9ddfd4de7078449a9bb3ab14582997c989c7a31cb409111c237f3755126166bc1b7fc8f0cd3ec4e5") write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:50 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) 17:26:50 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000001640)=ANY=[@ANYBLOB="3e0f909149c2d1b3369e2d4cc0e686a848a519340700000000000000697f9774b9d1e4d0d3a5d5b0beecceddde93251df7b553bf68d18c645e849ad8c1ac7b83266f6e6451d4286df089a4556b635b1455b5510b"], 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaa00070000000000"], 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000200)={0x1, @le_create_cis={{0x2064, 0x5}, {0x1, [{0x8, 0x8}]}}}, 0x9) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000380)=0x80, 0x4) (async, rerun: 64) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1407, 0x10, 0x70bd28, 0x25dfdc00, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r4 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3f}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50) (async, rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r5) (rerun: 64) shmctl$SHM_STAT(r4, 0xd, &(0x7f00000003c0)=""/4096) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0xc223014}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 17:26:51 executing program 3: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x10000000005, 0x5cf402) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f0000000140)=""/70, 0x46, 0x10000, &(0x7f00000001c0), 0x20) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000003c0)={0x0, {}, 0x0, {}, 0xffff, 0xa, 0x15, 0x8, "a7f4c6a25002a5ef1c9ef6eca0ad1a2a70f549f8925b79d7a911f3b8447c072c1b08f4bef14f229d3c523d6c8f24f3e6fc1c1e5a6d2edf895d3e70469504434d", "7d6e5b0c5f17fd96a341da690e554a674754f8e76d7082b66e4135d0a4085d0f", [0xfffffffffffff801, 0x6]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="85373da60037f703f4ec613995010000000000000000000500000006001c000000000008001800000000008f587f2f9fda5310cbca271a1c435c623955452e522000000000"], 0x24}}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000240), 0x8, 0x402000) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r8, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x5b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="f88c28bd7000ffdbdf250700000006001a004e24000006001c000100000008000a000400000005000d000000000008000a000400000008001700", @ANYRES32=r6, @ANYBLOB="e78d1f0020010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4) write$bt_hci(r0, 0x0, 0x6) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x10000000005, 0x5cf402) (async) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) recvfrom$l2tp6(r1, &(0x7f0000000140)=""/70, 0x46, 0x10000, &(0x7f00000001c0), 0x20) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000003c0)={0x0, {}, 0x0, {}, 0xffff, 0xa, 0x15, 0x8, "a7f4c6a25002a5ef1c9ef6eca0ad1a2a70f549f8925b79d7a911f3b8447c072c1b08f4bef14f229d3c523d6c8f24f3e6fc1c1e5a6d2edf895d3e70469504434d", "7d6e5b0c5f17fd96a341da690e554a674754f8e76d7082b66e4135d0a4085d0f", [0xfffffffffffff801, 0x6]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r3) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="85373da60037f703f4ec613995010000000000000000000500000006001c000000000008001800000000008f587f2f9fda5310cbca271a1c435c623955452e522000000000"], 0x24}}, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000240), 0x8, 0x402000) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r8, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x5b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="f88c28bd7000ffdbdf250700000006001a004e24000006001c000100000008000a000400000005000d000000000008000a000400000008001700", @ANYRES32=r6, @ANYBLOB="e78d1f0020010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) write$bt_hci(r0, 0x0, 0x6) (async) 17:26:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x6) 17:26:51 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0x0, 0x6}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x4044050) 17:26:51 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000140)="e3a8ae66be8008c748b7d176c4290ed0450de6df97e940e43a6c21ba7ede1f0ce3743a278cbaff508be04fa4e936d3ae6f173fcf942e8b02373c1127f9d5bd887cbbc3a8fbd21f59314ddd0d52f9d381207d437d0d764b52343b9ea756c353124552fd20a5e049a62dc771b52b7a966bf9b4a23c68efdf7bc36350454a30a99d5f14aa3325ee16bbd2db53f2e55b63159bbd4c9ef94ec6987b3c9ad1399d8ab2b9ad198c6fd536ca62596aec3bd03f56cf9ddfd4de7078449a9bb3ab14582997c989c7a31cb409111c237f3755126166bc1b7fc8f0cd3ec4e5") write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000140)="e3a8ae66be8008c748b7d176c4290ed0450de6df97e940e43a6c21ba7ede1f0ce3743a278cbaff508be04fa4e936d3ae6f173fcf942e8b02373c1127f9d5bd887cbbc3a8fbd21f59314ddd0d52f9d381207d437d0d764b52343b9ea756c353124552fd20a5e049a62dc771b52b7a966bf9b4a23c68efdf7bc36350454a30a99d5f14aa3325ee16bbd2db53f2e55b63159bbd4c9ef94ec6987b3c9ad1399d8ab2b9ad198c6fd536ca62596aec3bd03f56cf9ddfd4de7078449a9bb3ab14582997c989c7a31cb409111c237f3755126166bc1b7fc8f0cd3ec4e5") (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:51 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1f, 0x8}, 0xc) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000780), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000600)) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x401}, 0xc) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000680)={0x7ff, 0x3, 0x0, [{0x1, 0x2, 0x100000000, 0x90, 0x3f, 0x80, 0x0, '\x00', 0x2}, {0x4, 0x9, 0x0, 0x1, 0x81, 0x6, 0x4, '\x00', 0xffffffff}, {0x8, 0x4, 0xd4, 0x1, 0x9, 0x80, 0x3, '\x00', 0x4}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000100"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r3, r7}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x59, &(0x7f0000000100)=""/89, 0x41000, 0x11, '\x00', r2, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x800, 0x1}, 0x10, 0x1eb2, r3, 0x0, &(0x7f0000000540)=[r4, 0x1, r5]}, 0x80) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:51 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x6) 17:26:51 executing program 3: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x10000000005, 0x5cf402) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f0000000140)=""/70, 0x46, 0x10000, &(0x7f00000001c0), 0x20) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000003c0)={0x0, {}, 0x0, {}, 0xffff, 0xa, 0x15, 0x8, "a7f4c6a25002a5ef1c9ef6eca0ad1a2a70f549f8925b79d7a911f3b8447c072c1b08f4bef14f229d3c523d6c8f24f3e6fc1c1e5a6d2edf895d3e70469504434d", "7d6e5b0c5f17fd96a341da690e554a674754f8e76d7082b66e4135d0a4085d0f", [0xfffffffffffff801, 0x6]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="85373da60037f703f4ec613995010000000000000000000500000006001c000000000008001800000000008f587f2f9fda5310cbca271a1c435c623955452e522000000000"], 0x24}}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000240), 0x8, 0x402000) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r8, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x5b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="f88c28bd7000ffdbdf250700000006001a004e24000006001c000100000008000a000400000005000d000000000008000a000400000008001700", @ANYRES32=r6, @ANYBLOB="e78d1f0020010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4) write$bt_hci(r0, 0x0, 0x6) 17:26:51 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'batadv0\x00'}) 17:26:51 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0x0, 0x6}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x4044050) 17:26:51 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1f, 0x8}, 0xc) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000780), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000600)) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x401}, 0xc) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000680)={0x7ff, 0x3, 0x0, [{0x1, 0x2, 0x100000000, 0x90, 0x3f, 0x80, 0x0, '\x00', 0x2}, {0x4, 0x9, 0x0, 0x1, 0x81, 0x6, 0x4, '\x00', 0xffffffff}, {0x8, 0x4, 0xd4, 0x1, 0x9, 0x80, 0x3, '\x00', 0x4}]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000100"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r3, r7}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x59, &(0x7f0000000100)=""/89, 0x41000, 0x11, '\x00', r2, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x800, 0x1}, 0x10, 0x1eb2, r3, 0x0, &(0x7f0000000540)=[r4, 0x1, r5]}, 0x80) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:51 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1f, 0x8}, 0xc) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000780), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000600)) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x401}, 0xc) (async, rerun: 32) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) r6 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000680)={0x7ff, 0x3, 0x0, [{0x1, 0x2, 0x100000000, 0x90, 0x3f, 0x80, 0x0, '\x00', 0x2}, {0x4, 0x9, 0x0, 0x1, 0x81, 0x6, 0x4, '\x00', 0xffffffff}, {0x8, 0x4, 0xd4, 0x1, 0x9, 0x80, 0x3, '\x00', 0x4}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000100"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r3, r7}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x59, &(0x7f0000000100)=""/89, 0x41000, 0x11, '\x00', r2, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x800, 0x1}, 0x10, 0x1eb2, r3, 0x0, &(0x7f0000000540)=[r4, 0x1, r5]}, 0x80) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:51 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x68e02) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140a, 0x300, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c4}, 0x400c081) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r2}) 17:26:51 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000140)="e3a8ae66be8008c748b7d176c4290ed0450de6df97e940e43a6c21ba7ede1f0ce3743a278cbaff508be04fa4e936d3ae6f173fcf942e8b02373c1127f9d5bd887cbbc3a8fbd21f59314ddd0d52f9d381207d437d0d764b52343b9ea756c353124552fd20a5e049a62dc771b52b7a966bf9b4a23c68efdf7bc36350454a30a99d5f14aa3325ee16bbd2db53f2e55b63159bbd4c9ef94ec6987b3c9ad1399d8ab2b9ad198c6fd536ca62596aec3bd03f56cf9ddfd4de7078449a9bb3ab14582997c989c7a31cb409111c237f3755126166bc1b7fc8f0cd3ec4e5") (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x6) (async) 17:26:51 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'batadv0\x00'}) 17:26:51 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x68e02) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140a, 0x300, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c4}, 0x400c081) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r2}) 17:26:51 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0x0, 0x6}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x4044050) 17:26:51 executing program 1: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) 17:26:51 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_local_amp_assoc}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000340)=""/24, 0x18}, {&(0x7f0000000380)=""/80, 0x50}], 0x4, &(0x7f0000000440)=""/128, 0x80}, 0x10000) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x80000000, @loopback, 0x100, 0x1}, 0x20) 17:26:51 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x3, 0xffff, {{0x20, 0x4, 0x0, 0x2d, 0x80, 0x65, 0x0, 0xb0, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@rr={0x7, 0x17, 0xa5, [@rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x5, [0x9, 0x5]}, @lsrr={0x83, 0x1f, 0xb0, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @empty, @local, @broadcast, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0xa, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1f}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xaba}]}, @end]}}}}}) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:51 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x68e02) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140a, 0x300, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c4}, 0x400c081) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r2}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x68e02) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140a, 0x300, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c4}, 0x400c081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r2}) (async) 17:26:51 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xffb, 0x119000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) r1 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000600)={0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xe4, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r1}, @free_buffer, @request_death={0x400c630e, 0x3}, @register_looper, @release={0x40046306, 0x1}, @exit_looper, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/155, 0x9b, 0x0, 0x19}, @fda={0x66646185, 0x6, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x100, 0x2}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}, 0x1040}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/163, 0xa3, 0x0, 0xf}, @flat=@weak_binder={0x77622a85, 0x110a, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @exit_looper], 0xf4, 0x0, &(0x7f00000004c0)="6aa279b569b5fdacc06b49baa3ae172d6c6c82bd34ad31eb92339329cd653888402bdc0a7aaf269034ca09639145d3518da55a2357efb7aafd160e5a60c626aaaed99a1df158e341a5f48ecf39c7607f7a3b040125d517f69ade8876593e7b73aa10f04d8b41abbe97a90abb1d53f29c4c95d2f016512e850ccef5f1cf1f4d6c5356508405790ab039558c004b951bf4c2088d321f74453b9b6b8fbdbb650c018427bc865f54ef24697972eba106f7908ef14858d7282f30924c643cabdd9114c2236cc7e3993a11dbddd5c731446db8deb3454bff189375aa46b974ae536cffe148109443a6399bd20e09ff720567fed5cdafa7"}) 17:26:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x403, 0x698e00) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x3, 0x80000001, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0xf, 0x7c, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) 17:26:51 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'batadv0\x00'}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, 0x0, 0x6) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'batadv0\x00'}) (async) 17:26:51 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xffb, 0x119000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) r1 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000600)={0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xe4, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r1}, @free_buffer, @request_death={0x400c630e, 0x3}, @register_looper, @release={0x40046306, 0x1}, @exit_looper, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/155, 0x9b, 0x0, 0x19}, @fda={0x66646185, 0x6, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x100, 0x2}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}, 0x1040}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/163, 0xa3, 0x0, 0xf}, @flat=@weak_binder={0x77622a85, 0x110a, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @exit_looper], 0xf4, 0x0, &(0x7f00000004c0)="6aa279b569b5fdacc06b49baa3ae172d6c6c82bd34ad31eb92339329cd653888402bdc0a7aaf269034ca09639145d3518da55a2357efb7aafd160e5a60c626aaaed99a1df158e341a5f48ecf39c7607f7a3b040125d517f69ade8876593e7b73aa10f04d8b41abbe97a90abb1d53f29c4c95d2f016512e850ccef5f1cf1f4d6c5356508405790ab039558c004b951bf4c2088d321f74453b9b6b8fbdbb650c018427bc865f54ef24697972eba106f7908ef14858d7282f30924c643cabdd9114c2236cc7e3993a11dbddd5c731446db8deb3454bff189375aa46b974ae536cffe148109443a6399bd20e09ff720567fed5cdafa7"}) 17:26:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x403, 0x698e00) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x3, 0x80000001, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0xf, 0x7c, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_open_dev$vcsu(&(0x7f0000000100), 0x403, 0x698e00) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x3, 0x80000001, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0xf, 0x7c, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) 17:26:51 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xffb, 0x119000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) r1 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000600)={0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xe4, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r1}, @free_buffer, @request_death={0x400c630e, 0x3}, @register_looper, @release={0x40046306, 0x1}, @exit_looper, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/155, 0x9b, 0x0, 0x19}, @fda={0x66646185, 0x6, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x100, 0x2}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}, 0x1040}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/163, 0xa3, 0x0, 0xf}, @flat=@weak_binder={0x77622a85, 0x110a, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @exit_looper], 0xf4, 0x0, &(0x7f00000004c0)="6aa279b569b5fdacc06b49baa3ae172d6c6c82bd34ad31eb92339329cd653888402bdc0a7aaf269034ca09639145d3518da55a2357efb7aafd160e5a60c626aaaed99a1df158e341a5f48ecf39c7607f7a3b040125d517f69ade8876593e7b73aa10f04d8b41abbe97a90abb1d53f29c4c95d2f016512e850ccef5f1cf1f4d6c5356508405790ab039558c004b951bf4c2088d321f74453b9b6b8fbdbb650c018427bc865f54ef24697972eba106f7908ef14858d7282f30924c643cabdd9114c2236cc7e3993a11dbddd5c731446db8deb3454bff189375aa46b974ae536cffe148109443a6399bd20e09ff720567fed5cdafa7"}) 17:26:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x403, 0x698e00) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x3, 0x80000001, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x64, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0xf, 0x7c, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) 17:26:51 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}}}, 0xa) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x140e, 0xb6bb00faf5c77f8a, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x14) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0107415009ba03350ed75dcda5817966e60569e6dfe5d61a1690dbd8c571f09bc55b159ac849952a41d041f718394ada828e32cd7cda2d04ec920f2ea4bb336a51c397a275b4eb6745981a1d56f7229ba53b44ca944856e59d3b36d73acaefb81182e89d693e7ca80e043e51bc297eab23707d3950b941018aa17c0f59a7eb21f888ba8095513098863c306218586b6f94d9fe87e9e47920353b"], 0x6) 17:26:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x10000008, 0x309a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x6) 17:26:51 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_local_amp_assoc}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000340)=""/24, 0x18}, {&(0x7f0000000380)=""/80, 0x50}], 0x4, &(0x7f0000000440)=""/128, 0x80}, 0x10000) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x80000000, @loopback, 0x100, 0x1}, 0x20) 17:26:51 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_local_amp_assoc}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000340)=""/24, 0x18}, {&(0x7f0000000380)=""/80, 0x50}], 0x4, &(0x7f0000000440)=""/128, 0x80}, 0x10000) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x80000000, @loopback, 0x100, 0x1}, 0x20) 17:26:51 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0xfffffffd, 0x1], 0xfffe}, 0x10) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x10000008, 0x309a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x6) syz_open_dev$vcsu(&(0x7f0000000080), 0x10000008, 0x309a02) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x6) (async) 17:26:51 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0xda5, 'bGn'}, 0x6) write$bt_hci(r0, 0x0, 0x6) 17:26:51 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_local_amp_assoc}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000340)=""/24, 0x18}, {&(0x7f0000000380)=""/80, 0x50}], 0x4, &(0x7f0000000440)=""/128, 0x80}, 0x10000) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x80000000, @loopback, 0x100, 0x1}, 0x20) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_local_amp_assoc}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000340)=""/24, 0x18}, {&(0x7f0000000380)=""/80, 0x50}], 0x4, &(0x7f0000000440)=""/128, 0x80}, 0x10000) (async) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x80000000, @loopback, 0x100, 0x1}, 0x20) (async) 17:26:51 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}}}, 0xa) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x140e, 0xb6bb00faf5c77f8a, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x14) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0107415009ba03350ed75dcda5817966e60569e6dfe5d61a1690dbd8c571f09bc55b159ac849952a41d041f718394ada828e32cd7cda2d04ec920f2ea4bb336a51c397a275b4eb6745981a1d56f7229ba53b44ca944856e59d3b36d73acaefb81182e89d693e7ca80e043e51bc297eab23707d3950b941018aa17c0f59a7eb21f888ba8095513098863c306218586b6f94d9fe87e9e47920353b"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}}}, 0xa) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x140e, 0xb6bb00faf5c77f8a, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x14) (async) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0107415009ba03350ed75dcda5817966e60569e6dfe5d61a1690dbd8c571f09bc55b159ac849952a41d041f718394ada828e32cd7cda2d04ec920f2ea4bb336a51c397a275b4eb6745981a1d56f7229ba53b44ca944856e59d3b36d73acaefb81182e89d693e7ca80e043e51bc297eab23707d3950b941018aa17c0f59a7eb21f888ba8095513098863c306218586b6f94d9fe87e9e47920353b"], 0x6) (async) 17:26:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x10000008, 0x309a02) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x6) 17:26:51 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0xda5, 'bGn'}, 0x6) (async) write$bt_hci(r0, 0x0, 0x6) 17:26:51 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}}}, 0xa) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x140e, 0xb6bb00faf5c77f8a, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x14) (async) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0107415009ba03350ed75dcda5817966e60569e6dfe5d61a1690dbd8c571f09bc55b159ac849952a41d041f718394ada828e32cd7cda2d04ec920f2ea4bb336a51c397a275b4eb6745981a1d56f7229ba53b44ca944856e59d3b36d73acaefb81182e89d693e7ca80e043e51bc297eab23707d3950b941018aa17c0f59a7eb21f888ba8095513098863c306218586b6f94d9fe87e9e47920353b"], 0x6) 17:26:51 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendto$l2tp6(r1, &(0x7f0000000140)="9d42b00c6ac8ffb492a77736975f0ea4249cf8a505faa08c737799354c7820af97d67fd98142662c66209e61a3ba6cc17111d06eb99b80f9776001403efd8486daad4b2f1cc2f4", 0x47, 0x44880, &(0x7f00000000c0)={0xa, 0x0, 0x7f, @mcast1, 0x3, 0x2}, 0x20) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1411, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x2836d6a66173b8e1}, 0x4001) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:52 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) socketpair(0x28, 0x6, 0x5, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) getpeername$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x20) 17:26:52 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0xfffffffd, 0x1], 0xfffe}, 0x10) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0xfffffffd, 0x1], 0xfffe}, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) 17:26:52 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0xda5, 'bGn'}, 0x6) (async) write$bt_hci(r0, 0x0, 0x6) 17:26:52 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaa8f15ed00"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:52 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:26:52 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendto$l2tp6(r1, &(0x7f0000000140)="9d42b00c6ac8ffb492a77736975f0ea4249cf8a505faa08c737799354c7820af97d67fd98142662c66209e61a3ba6cc17111d06eb99b80f9776001403efd8486daad4b2f1cc2f4", 0x47, 0x44880, &(0x7f00000000c0)={0xa, 0x0, 0x7f, @mcast1, 0x3, 0x2}, 0x20) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1411, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x2836d6a66173b8e1}, 0x4001) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendto$l2tp6(r1, &(0x7f0000000140)="9d42b00c6ac8ffb492a77736975f0ea4249cf8a505faa08c737799354c7820af97d67fd98142662c66209e61a3ba6cc17111d06eb99b80f9776001403efd8486daad4b2f1cc2f4", 0x47, 0x44880, &(0x7f00000000c0)={0xa, 0x0, 0x7f, @mcast1, 0x3, 0x2}, 0x20) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1411, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x2836d6a66173b8e1}, 0x4001) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) 17:26:52 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) socketpair(0x28, 0x6, 0x5, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) getpeername$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x20) 17:26:52 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaa8f15ed00"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:52 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0xfffffffd, 0x1], 0xfffe}, 0x10) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0xfffffffd, 0x1], 0xfffe}, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) 17:26:52 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendto$l2tp6(r1, &(0x7f0000000140)="9d42b00c6ac8ffb492a77736975f0ea4249cf8a505faa08c737799354c7820af97d67fd98142662c66209e61a3ba6cc17111d06eb99b80f9776001403efd8486daad4b2f1cc2f4", 0x47, 0x44880, &(0x7f00000000c0)={0xa, 0x0, 0x7f, @mcast1, 0x3, 0x2}, 0x20) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1411, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x2836d6a66173b8e1}, 0x4001) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:52 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xf6e, 0x62c2) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) 17:26:52 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0xfffff800, 0x4) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="81667509"], 0x6) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008821}, 0x4000) 17:26:52 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:26:52 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xf6e, 0x62c2) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) 17:26:52 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaa8f15ed00"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:52 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x443ec2) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x2c5b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x400c0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140), 0x4) 17:26:52 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000140)="fc38eac6759767503d4aacf0b3054481244dabb759bca5d33afc1bba15aa9529c6a46df23fd596b15d39ade9d8fc0e7dba412e02b5b45f0647e7b1b9bb392aa209e09b0f5676d9f0b6cd1795917a6f0f6fa71b4b42a7639109cb8f2dd02df308b24d51e2a26f9f5addf960d51cc6c0e4735d31f92f15094d177fe65dc9e4469c7584c2bbfce0797f6d438e714d047fc2a36dd53814ec151b9ebe432bb8a32ff168e840ce41fa38e2c8f873025d0f0f28c323e9737dad18e8c8b91b1c91c26fe134a8ba015eeccc655066dbc2454adf96305cf654244e60c6aae1e5c884022eff46caa939dfe48c32d3bae841baf528a72ae50ed1d50486d4d212f6d5a0b93c78bbc5a650dce688f28d825f0c6e6e347b02da4e76dbe2e22f2d0d451e368b5d126fabd8161074cb901c2003c1c17ccf877cb445cc008c0358a451bdb3fd07bc21869e066d2d62dcb0d7e2b6d757870b906fe8f35ba99b283ae26c334a19a3042d602a4330cd87adc332305f92f8d8f3f1d625d8b687353febf255d7691475479c559ec362424f04da515f1c280ed54f0f9c291669323377d88e12672b6af20a79622fe04cd14a388e3c4d5619aa91257257944f606ca29ef34e896a85d3cbc8aaa9bd9a4a75bdec156c4f93c967c1de32d557091678c6c52ec8cf403f950c5d7dbe82ae24d553fa3757c6ea4af91f9551438986a33d31d7fee4c2422f12427d17277276ec1322427aec51c4b43ff2764e4c27063abd1490953ae8ecd225e434f1b452059c294f0aec6a90d30393e2e7475cc246d1bc03fc8743d52fa400f66bc42cec6461a527cf70036f98efeb3ca92b0b2264ac7a9be4c9d5fb026d54aa6c08c959ae68f211ec65858e5de7505e24297a0ce29ded725ae7bf4eea743c8e02b9964318188c1ee79c259f3eaf6623f202dd84a07916a2554bc20218d862387859f037386de00b232ea6a5a7f9a5da0279217e7b23f434dc4159cb7b26469d99d7bfa977f2d00cfc7bedae5f864c93af3c07dab6ca607f0a039553ad5dadae5d53b6971206f6f146337256408e4314cf00ea93bac210ea6f98f69af1a3ee2911fe3a8357c79e7613a0f658c59f3e216a413a10e6f39a2b0a0a34086d5576aed4aaf7072964278a7ae0fb16aa321c057b654eaba72aea8916b5ce4f595705c2e12e1206fc26b54835d0412b17ea9a289d95a93bbe3a652bfca182f94539a927b565f1b1724093038e714c340770db89256ee217cf894bd4401973caad9473ae7194d45222f311b8037708c20fabf10b157f6ddb0f18a48f768bede2523bb7234479a0e4f2cedbf3522c2e79da6f606dc9e741e393e2090946069bd9f0c19caa0763a464af48aaa1f70e71b85e73ff398f6ffd9860fe270ff8eed1c41873fc932f05dacb3cf819645a5c62b27cbb32fcbdf97dcd0145396ecad446d981ab814d8e3230cbe08b0d4878abe64cb39c34139c68928ae4c4693d6a622960dd986b07cc14ffd55b5cb18641775ac7d1d51755e0a901011da22bedb942af3b55403f7a8239e7fccf7c7ee5c16d7bb99a53779b1425b798a939588d471a92835a2a2c183fc4081f28d15ca7a6e9f246ad842b1f76028cf7ec30552398c95a39072c54107ad9c1e8b3f8d956c1aaaa46cd40765af5cd571b23dff60d40464d37670fa15dd0416bd23db53f740079fa86d23d78604f509b05906c6abfbd282730e62e19cd759340f04c85f3f56fcb94f8c0401fc1d3816f86029cbb0589b75d5c2d9a0102f225b315b1ec1d0eac1d8e0f737f97ee960c897b44539b6eb01d5f7a8adef4aa55ad31b63ae1515d9d7079edd3278583c7b0b0aceed4c0ea8ad1766273fa39cdeb5c12097cb4d166b8571189e7292b1a43d4efb59fbbdbbb89d6ca07257f8374a996411407149471212b98f0c999540e7b6dcda2bfe067ed7eb7086d5c887d88994ea90f6048b06c2d3e735823994b975a7ad5ee12c2fd66b2daf2609c2432ffc96d09b65b14bacf0393df046b2332d075c88569139e82ef0c8ffa049ed303588807d45342d9282cdd8172642102373ff3797c290ca3e13c1682733fbf7b652ec540020d45236ff930095d2fa0c2b73f3c58aa107a975a340ee296418c33ef9155a8d491791354be7c917a6c071fa617816001c32d557c939a9900e04b2aa2db6737f17b4a2047ee9bde9639eaeb4bbd919691c49843ea9763384a69ae6fd28ce66b155ff59976b8f9fc8ad4d57333c83de8f57208a3c4c9558a1b29fde3bd5a1f1e9f2caeb81f3618ec8847c3577b416e2664425a41835e4567051a9b4ae7e340ab39ad2dcc28df986404bb09919c1af12bd98dd4ca851ace579f50f08ea118ab594f304bc3483ede0ca2c335b47912a9cb6e265887017311b3cf3545aa9db4095dc454e69183435d87499558156e177e409f7e8d9a666f477005cc8f4d1b7703fb98a4fb684b872609c921c3eb9adb305237ee3d9b4608c28a42645cf5d33119fd415e0853ee1bdfb9286482038ee45facc3f87170219504c9c9e27ba97d7759ed323e796dc97c0d941fd21dc48bf12c023c81e8b5df0416c30f7d6803b8c150d287dd4a8c395963f8300baace31a60e55f217fbb09f006f5658b86fd77526eef1fea65e25b270e7e39a8fa994d25467a99ae47f4a27cf5377671326b802d1efa0dc9e23ab9f20cfbf54d84220ceaf93f0582881eeb6b3b10fc678b6435e877603355542a6303e71e0e0867a1ba9e5ec9a0feeeb267fd215a914c743b92922a9eae0753becf8229faaa399ce99b81822d6ff83344d7e01fb65f5a51dd59e0866275000c63d0793adbac82966dbe476f1d8eaab67f9cffd6218696645f6eb644839089302f86a4a9ca28fad888ec548fa9e6754fd8b42faabd9bdc637855c17eb330005d19a9dff16762eebe5b2e870f0d6173fe25aaae0fe80d4df4d83f351312e1082a558ae100d74f2b0402043f41afbe20174a4c0483cf93abd3f995f864fe3e76b2a506f1b92e9c260d816eff787efb42cfbdab94c0ae7c3e6ba4b70398b5924e504c638c2aeeab151fe72759467806474e20e4203581a28034815adb41aa84f4dc1f8a6b0af3ce49cecea0c9c6f6c763ef9066f85c88c0ade6a3876c8048cc6bea70b5d98bf9df0d71ebefa97490d2d3ab7be4b3e89a4c53fe3b67df8c45b842d505d2d17660021ff36b9f090343fb524ca4c58d6eb4c0bb9b708f390d04009356fb038ae0a04dc9f1abf08942fb660601a046c7cfd6bd7d4582543cfa6bef24de680cea082f46e15dca69ddb578bb18da03809e46f1c43bd390029eb6c887b12a82de2d0e9c8a298cae85e23a3681c4e1dec60709b50d94ea513525cf25b5aeb5463c09f01645ebdc0ce7ebe3312db59dc4be573e55bcc3d09558d48e5ba2e2e9ac556c7e12abae1ab453d9c3bc7da0c9ae4cb4f85be681a55b733c666ef5dae001b68a6fb8925d3d179bbbb0a0cbf4afd60f8160608f554746111fa8e6e12d463ac775768621cb3723c8cde729f704608cedbb00f26b1168f218fea3825ac51e656de1bfdde7c0760b16511e91c83061b0711df262d78d742954067946995f7cafb8ac9b6ccd386d560eddf2bdf2ff55cee824d571ecb1f5843e1b27f102c9b4d13260b27a104a66e103e65a5a541279b6582ca05779a8ceb7bae0302a88b78cba7cbb79f3846aa981e771bc45634e20c772b45e8522ee78eb54ca65cacfc1f468836fc122afe61dd6b5c4cfa5ab05776975d6b79be2b95421de569f13318adf3794bfcea1347b1f0f1c57e1efcf9108944a55547b60908649e966ecb4c49806448f4d9c3786ea83a98ac4dc248f0d253c163a4a03646656c30ff0b9ff278ea9b6c7c8b00c868cd6b635998ea439a0eaf1df9813f2c48d6ffe37617379684750d4091899bc178af8805b5f76a9c9a8e5f2959373526e1c41d0d6680b9386945fec2b7c01b0bca64c24e32b0d30aa88ffe3a805256c0aa3ebe4b29f26bf29dd600b98741eb47f6eade53db2abfac4be35a9851b0afede0e85cec0902c02ad29285c87ce9ca2776d146db0be243b7cc56c4237eb704abf1fdb28bae475cce8ca39244263549c5f148a7974a7c5dbd0d1624b2053468eaff5687203a020aeda796d84537df60e8d4083cdff83df5a3c1b9e5fd5ebb192ed180b21add3107990fa13d6c158f1eea4fd4f0c3c13ad7e79a666cc5b990299cc714bc8df49fa91c34443514606408fef30733ebef331d7b4c543680e061e7cc057122f9ac3e52187134d306e4dbacf90df31c3c80b2de12a31e5ad88f174803dbcd67bccc1be6c84b9ba9c7cf55c05bf9b23ed8c9718c798367a5f7d8bdc9105f3ec6d349c01ee5df0b3c7591e9b572731d7b4b2a9b91dc38a6a5db6a96689c5e860c6d3d13506bfe313a39b34f8e2cf4409ac2fdf21f4430ee9996a7a31642ffb9668743a04cd8af97514eed3483d831c75ea06bd9268bc3e89215917d5415e44a8c894aca8c8a595a294abe2cd56d906e67c586e0a74c1542fb5b0f3d57fa74bf83ebe3fbe5811b8d61b1b5fdf35fd9699e2935a2883b7c1b1968b1fee14cd1de8a3c6a1ee7d307e0eea3c2ccbb27fea47f19d9eff95a74aadc9380da23349436251854e16636283fcd817dcb752e7ef663e877cb3b4b28fa79795b2c91b5017291b2ab4bfe289308674fb1538fb6ac1666130a8e64d79a9f5c0d6c6f8b06c066e33de4686405641ed42282d98531ddcaa2206c3304b9f38e2935f7d015fd497300f1626232155246e637650558e04ce68cc165a8b0eafa5d5a9370e8766ff1114e0142b72b89892eb15057c3aee0a7c108993716aaf468add2d2a144f52d17f0128892d6cbc462c3a219567dc44a00c29d67b30977d76db3f27bfb6d19b656ed5a71c8460a7ade9a0b7844da65cecbba9b8fce26b2b2d7dfb0df68baa8e55d8bf54c70917015de0e5f3f9efbc3d3957975d4b8c7dbf4ea2b93f4d72ab6ba7e85c5ba1be4dca0f14cef1372e0c2f73cd0151d564a8427f00e3d2c3c96f946ae301040197e644aed66668e087a16e08af23552ed8233988fffcd20dfdbef56cb68a35bb2b3ab981bd0b3bd71746d7e0ef351d27002e4b0599a9fb58469a58ba200c34e5ebe4b75edc7940d10a3ca23f165af80a34174d534ac1e764ead0834adb3a258dd4c70fc85a32529e830446f212fea1872cf31aef02f26890e20d30d1f6d94515a56fb8900a42263bb56b7684a923b3d2424b3046a089f0db0bf1922d00d30db7b04757509a8eca6ca899a0ef7f0b05863e88b3a697731b21b5b1c64883241de2f1aff624a292e9e13eb92daacbc2c6126971d34fe7123f1bcf211a71e2102bf9f4551344f13765120ad984729e54b4b9bc330f1e3eca7ff51cadb36b7c0bcf8183ccba0b451c0f22930f5d2b04c5946e3a2b9e06606ce188ceac6e8bf142e9f71d4563b797da290ec9a02eefb4a817d4aab0e1f43f763339795a901b4330ca6b4d7380df0271b1c80f998238205e83a1a9a0a74706741f03aa259cc9582185acca16a07de9bfbd0c9de64b44b14c7ade641230b9be2b09199733704d6056dce80d6d495cdc551a9639351b1d8c28d00855e0fef1729da1a34d15300dc4a839e9f5639054a513f0512099f66095cce96842bee6fd2633b5d8f40f88b2045f1f20f8f7114691ac88875c93bc42590cc79f5da0f670f1cfbcfe20819aacabf44bf37f25b7ff8a08a7a6e803d1169bc89b6c9161dbfe8428e71bf3a63ee3583571392a53e0f8cee64ecd9b699a7f153508a1fcbeea380653129add216525ea699cad854b798") 17:26:52 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x443ec2) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x2c5b, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x400c0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) (async) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) (async) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140), 0x4) 17:26:52 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x443ec2) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x2c5b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x400c0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140), 0x4) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x443ec2) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x2c5b, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x400c0) (async) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) (async) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) (async) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140), 0x4) (async) 17:26:52 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = io_uring_setup(0x46c9, &(0x7f0000000040)={0x0, 0xcff4, 0x2, 0x2, 0x370, 0x0, r0}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 17:26:52 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:26:52 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, 0x0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xf6e, 0x62c2) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, 0x0, 0x6) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0xf6e, 0x62c2) (async) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) (async) 17:26:52 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000140)="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") syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) (async) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000140)="fc38eac6759767503d4aacf0b3054481244dabb759bca5d33afc1bba15aa9529c6a46df23fd596b15d39ade9d8fc0e7dba412e02b5b45f0647e7b1b9bb392aa209e09b0f5676d9f0b6cd1795917a6f0f6fa71b4b42a7639109cb8f2dd02df308b24d51e2a26f9f5addf960d51cc6c0e4735d31f92f15094d177fe65dc9e4469c7584c2bbfce0797f6d438e714d047fc2a36dd53814ec151b9ebe432bb8a32ff168e840ce41fa38e2c8f873025d0f0f28c323e9737dad18e8c8b91b1c91c26fe134a8ba015eeccc655066dbc2454adf96305cf654244e60c6aae1e5c884022eff46caa939dfe48c32d3bae841baf528a72ae50ed1d50486d4d212f6d5a0b93c78bbc5a650dce688f28d825f0c6e6e347b02da4e76dbe2e22f2d0d451e368b5d126fabd8161074cb901c2003c1c17ccf877cb445cc008c0358a451bdb3fd07bc21869e066d2d62dcb0d7e2b6d757870b906fe8f35ba99b283ae26c334a19a3042d602a4330cd87adc332305f92f8d8f3f1d625d8b687353febf255d7691475479c559ec362424f04da515f1c280ed54f0f9c291669323377d88e12672b6af20a79622fe04cd14a388e3c4d5619aa91257257944f606ca29ef34e896a85d3cbc8aaa9bd9a4a75bdec156c4f93c967c1de32d557091678c6c52ec8cf403f950c5d7dbe82ae24d553fa3757c6ea4af91f9551438986a33d31d7fee4c2422f12427d17277276ec1322427aec51c4b43ff2764e4c27063abd1490953ae8ecd225e434f1b452059c294f0aec6a90d30393e2e7475cc246d1bc03fc8743d52fa400f66bc42cec6461a527cf70036f98efeb3ca92b0b2264ac7a9be4c9d5fb026d54aa6c08c959ae68f211ec65858e5de7505e24297a0ce29ded725ae7bf4eea743c8e02b9964318188c1ee79c259f3eaf6623f202dd84a07916a2554bc20218d862387859f037386de00b232ea6a5a7f9a5da0279217e7b23f434dc4159cb7b26469d99d7bfa977f2d00cfc7bedae5f864c93af3c07dab6ca607f0a039553ad5dadae5d53b6971206f6f146337256408e4314cf00ea93bac210ea6f98f69af1a3ee2911fe3a8357c79e7613a0f658c59f3e216a413a10e6f39a2b0a0a34086d5576aed4aaf7072964278a7ae0fb16aa321c057b654eaba72aea8916b5ce4f595705c2e12e1206fc26b54835d0412b17ea9a289d95a93bbe3a652bfca182f94539a927b565f1b1724093038e714c340770db89256ee217cf894bd4401973caad9473ae7194d45222f311b8037708c20fabf10b157f6ddb0f18a48f768bede2523bb7234479a0e4f2cedbf3522c2e79da6f606dc9e741e393e2090946069bd9f0c19caa0763a464af48aaa1f70e71b85e73ff398f6ffd9860fe270ff8eed1c41873fc932f05dacb3cf819645a5c62b27cbb32fcbdf97dcd0145396ecad446d981ab814d8e3230cbe08b0d4878abe64cb39c34139c68928ae4c4693d6a622960dd986b07cc14ffd55b5cb18641775ac7d1d51755e0a901011da22bedb942af3b55403f7a8239e7fccf7c7ee5c16d7bb99a53779b1425b798a939588d471a92835a2a2c183fc4081f28d15ca7a6e9f246ad842b1f76028cf7ec30552398c95a39072c54107ad9c1e8b3f8d956c1aaaa46cd40765af5cd571b23dff60d40464d37670fa15dd0416bd23db53f740079fa86d23d78604f509b05906c6abfbd282730e62e19cd759340f04c85f3f56fcb94f8c0401fc1d3816f86029cbb0589b75d5c2d9a0102f225b315b1ec1d0eac1d8e0f737f97ee960c897b44539b6eb01d5f7a8adef4aa55ad31b63ae1515d9d7079edd3278583c7b0b0aceed4c0ea8ad1766273fa39cdeb5c12097cb4d166b8571189e7292b1a43d4efb59fbbdbbb89d6ca07257f8374a996411407149471212b98f0c999540e7b6dcda2bfe067ed7eb7086d5c887d88994ea90f6048b06c2d3e735823994b975a7ad5ee12c2fd66b2daf2609c2432ffc96d09b65b14bacf0393df046b2332d075c88569139e82ef0c8ffa049ed303588807d45342d9282cdd8172642102373ff3797c290ca3e13c1682733fbf7b652ec540020d45236ff930095d2fa0c2b73f3c58aa107a975a340ee296418c33ef9155a8d491791354be7c917a6c071fa617816001c32d557c939a9900e04b2aa2db6737f17b4a2047ee9bde9639eaeb4bbd919691c49843ea9763384a69ae6fd28ce66b155ff59976b8f9fc8ad4d57333c83de8f57208a3c4c9558a1b29fde3bd5a1f1e9f2caeb81f3618ec8847c3577b416e2664425a41835e4567051a9b4ae7e340ab39ad2dcc28df986404bb09919c1af12bd98dd4ca851ace579f50f08ea118ab594f304bc3483ede0ca2c335b47912a9cb6e265887017311b3cf3545aa9db4095dc454e69183435d87499558156e177e409f7e8d9a666f477005cc8f4d1b7703fb98a4fb684b872609c921c3eb9adb305237ee3d9b4608c28a42645cf5d33119fd415e0853ee1bdfb9286482038ee45facc3f87170219504c9c9e27ba97d7759ed323e796dc97c0d941fd21dc48bf12c023c81e8b5df0416c30f7d6803b8c150d287dd4a8c395963f8300baace31a60e55f217fbb09f006f5658b86fd77526eef1fea65e25b270e7e39a8fa994d25467a99ae47f4a27cf5377671326b802d1efa0dc9e23ab9f20cfbf54d84220ceaf93f0582881eeb6b3b10fc678b6435e877603355542a6303e71e0e0867a1ba9e5ec9a0feeeb267fd215a914c743b92922a9eae0753becf8229faaa399ce99b81822d6ff83344d7e01fb65f5a51dd59e0866275000c63d0793adbac82966dbe476f1d8eaab67f9cffd6218696645f6eb644839089302f86a4a9ca28fad888ec548fa9e6754fd8b42faabd9bdc637855c17eb330005d19a9dff16762eebe5b2e870f0d6173fe25aaae0fe80d4df4d83f351312e1082a558ae100d74f2b0402043f41afbe20174a4c0483cf93abd3f995f864fe3e76b2a506f1b92e9c260d816eff787efb42cfbdab94c0ae7c3e6ba4b70398b5924e504c638c2aeeab151fe72759467806474e20e4203581a28034815adb41aa84f4dc1f8a6b0af3ce49cecea0c9c6f6c763ef9066f85c88c0ade6a3876c8048cc6bea70b5d98bf9df0d71ebefa97490d2d3ab7be4b3e89a4c53fe3b67df8c45b842d505d2d17660021ff36b9f090343fb524ca4c58d6eb4c0bb9b708f390d04009356fb038ae0a04dc9f1abf08942fb660601a046c7cfd6bd7d4582543cfa6bef24de680cea082f46e15dca69ddb578bb18da03809e46f1c43bd390029eb6c887b12a82de2d0e9c8a298cae85e23a3681c4e1dec60709b50d94ea513525cf25b5aeb5463c09f01645ebdc0ce7ebe3312db59dc4be573e55bcc3d09558d48e5ba2e2e9ac556c7e12abae1ab453d9c3bc7da0c9ae4cb4f85be681a55b733c666ef5dae001b68a6fb8925d3d179bbbb0a0cbf4afd60f8160608f554746111fa8e6e12d463ac775768621cb3723c8cde729f704608cedbb00f26b1168f218fea3825ac51e656de1bfdde7c0760b16511e91c83061b0711df262d78d742954067946995f7cafb8ac9b6ccd386d560eddf2bdf2ff55cee824d571ecb1f5843e1b27f102c9b4d13260b27a104a66e103e65a5a541279b6582ca05779a8ceb7bae0302a88b78cba7cbb79f3846aa981e771bc45634e20c772b45e8522ee78eb54ca65cacfc1f468836fc122afe61dd6b5c4cfa5ab05776975d6b79be2b95421de569f13318adf3794bfcea1347b1f0f1c57e1efcf9108944a55547b60908649e966ecb4c49806448f4d9c3786ea83a98ac4dc248f0d253c163a4a03646656c30ff0b9ff278ea9b6c7c8b00c868cd6b635998ea439a0eaf1df9813f2c48d6ffe37617379684750d4091899bc178af8805b5f76a9c9a8e5f2959373526e1c41d0d6680b9386945fec2b7c01b0bca64c24e32b0d30aa88ffe3a805256c0aa3ebe4b29f26bf29dd600b98741eb47f6eade53db2abfac4be35a9851b0afede0e85cec0902c02ad29285c87ce9ca2776d146db0be243b7cc56c4237eb704abf1fdb28bae475cce8ca39244263549c5f148a7974a7c5dbd0d1624b2053468eaff5687203a020aeda796d84537df60e8d4083cdff83df5a3c1b9e5fd5ebb192ed180b21add3107990fa13d6c158f1eea4fd4f0c3c13ad7e79a666cc5b990299cc714bc8df49fa91c34443514606408fef30733ebef331d7b4c543680e061e7cc057122f9ac3e52187134d306e4dbacf90df31c3c80b2de12a31e5ad88f174803dbcd67bccc1be6c84b9ba9c7cf55c05bf9b23ed8c9718c798367a5f7d8bdc9105f3ec6d349c01ee5df0b3c7591e9b572731d7b4b2a9b91dc38a6a5db6a96689c5e860c6d3d13506bfe313a39b34f8e2cf4409ac2fdf21f4430ee9996a7a31642ffb9668743a04cd8af97514eed3483d831c75ea06bd9268bc3e89215917d5415e44a8c894aca8c8a595a294abe2cd56d906e67c586e0a74c1542fb5b0f3d57fa74bf83ebe3fbe5811b8d61b1b5fdf35fd9699e2935a2883b7c1b1968b1fee14cd1de8a3c6a1ee7d307e0eea3c2ccbb27fea47f19d9eff95a74aadc9380da23349436251854e16636283fcd817dcb752e7ef663e877cb3b4b28fa79795b2c91b5017291b2ab4bfe289308674fb1538fb6ac1666130a8e64d79a9f5c0d6c6f8b06c066e33de4686405641ed42282d98531ddcaa2206c3304b9f38e2935f7d015fd497300f1626232155246e637650558e04ce68cc165a8b0eafa5d5a9370e8766ff1114e0142b72b89892eb15057c3aee0a7c108993716aaf468add2d2a144f52d17f0128892d6cbc462c3a219567dc44a00c29d67b30977d76db3f27bfb6d19b656ed5a71c8460a7ade9a0b7844da65cecbba9b8fce26b2b2d7dfb0df68baa8e55d8bf54c70917015de0e5f3f9efbc3d3957975d4b8c7dbf4ea2b93f4d72ab6ba7e85c5ba1be4dca0f14cef1372e0c2f73cd0151d564a8427f00e3d2c3c96f946ae301040197e644aed66668e087a16e08af23552ed8233988fffcd20dfdbef56cb68a35bb2b3ab981bd0b3bd71746d7e0ef351d27002e4b0599a9fb58469a58ba200c34e5ebe4b75edc7940d10a3ca23f165af80a34174d534ac1e764ead0834adb3a258dd4c70fc85a32529e830446f212fea1872cf31aef02f26890e20d30d1f6d94515a56fb8900a42263bb56b7684a923b3d2424b3046a089f0db0bf1922d00d30db7b04757509a8eca6ca899a0ef7f0b05863e88b3a697731b21b5b1c64883241de2f1aff624a292e9e13eb92daacbc2c6126971d34fe7123f1bcf211a71e2102bf9f4551344f13765120ad984729e54b4b9bc330f1e3eca7ff51cadb36b7c0bcf8183ccba0b451c0f22930f5d2b04c5946e3a2b9e06606ce188ceac6e8bf142e9f71d4563b797da290ec9a02eefb4a817d4aab0e1f43f763339795a901b4330ca6b4d7380df0271b1c80f998238205e83a1a9a0a74706741f03aa259cc9582185acca16a07de9bfbd0c9de64b44b14c7ade641230b9be2b09199733704d6056dce80d6d495cdc551a9639351b1d8c28d00855e0fef1729da1a34d15300dc4a839e9f5639054a513f0512099f66095cce96842bee6fd2633b5d8f40f88b2045f1f20f8f7114691ac88875c93bc42590cc79f5da0f670f1cfbcfe20819aacabf44bf37f25b7ff8a08a7a6e803d1169bc89b6c9161dbfe8428e71bf3a63ee3583571392a53e0f8cee64ecd9b699a7f153508a1fcbeea380653129add216525ea699cad854b798") (async) 17:26:52 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:26:52 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = io_uring_setup(0x46c9, &(0x7f0000000040)={0x0, 0xcff4, 0x2, 0x2, 0x370, 0x0, r0}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 17:26:52 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="dcadc5325422ebbea759da49851b31e6021bc78313afbe5d9c238704ec32f51773ebf091fcc51f0eefd97c7064fe3eca2434f63cb77134046911c41d78b897204733810e591b0bfd366299b15fe2470c94"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:52 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}, 0x20) 17:26:52 executing program 3: socketpair(0x8, 0x6, 0x1b, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_GW_SEL_CLASS={0xffffffffffffff97, 0x34, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff0000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20088) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x8, 0x80000, 0xff, &(0x7f0000000000)) write$bt_hci(r2, 0x0, 0x6) 17:26:52 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:26:52 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="dcadc5325422ebbea759da49851b31e6021bc78313afbe5d9c238704ec32f51773ebf091fcc51f0eefd97c7064fe3eca2434f63cb77134046911c41d78b897204733810e591b0bfd366299b15fe2470c94"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:52 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = io_uring_setup(0x46c9, &(0x7f0000000040)={0x0, 0xcff4, 0x2, 0x2, 0x370, 0x0, r0}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 17:26:52 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000140)="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") 17:26:52 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}, 0x20) 17:26:52 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="dcadc5325422ebbea759da49851b31e6021bc78313afbe5d9c238704ec32f51773ebf091fcc51f0eefd97c7064fe3eca2434f63cb77134046911c41d78b897204733810e591b0bfd366299b15fe2470c94"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:52 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x1000, 0x231, 0x1}) 17:26:52 executing program 3: socketpair(0x8, 0x6, 0x1b, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_GW_SEL_CLASS={0xffffffffffffff97, 0x34, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff0000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20088) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x8, 0x80000, 0xff, &(0x7f0000000000)) write$bt_hci(r2, 0x0, 0x6) socketpair(0x8, 0x6, 0x1b, &(0x7f00000001c0)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_GW_SEL_CLASS={0xffffffffffffff97, 0x34, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff0000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20088) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socketpair(0x8, 0x80000, 0xff, &(0x7f0000000000)) (async) write$bt_hci(r2, 0x0, 0x6) (async) 17:26:52 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb969}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004000) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6) 17:26:52 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:26:52 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}, 0x20) 17:26:52 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb969}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004000) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6) 17:26:52 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) (fail_nth: 1) 17:26:52 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x1000, 0x231, 0x1}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x1000, 0x231, 0x1}) (async) 17:26:52 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"c36dc288ac7e3e35"}}}, 0xc) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 17:26:52 executing program 3: socketpair(0x8, 0x6, 0x1b, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_GW_SEL_CLASS={0xffffffffffffff97, 0x34, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff0000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20088) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x8, 0x80000, 0xff, &(0x7f0000000000)) write$bt_hci(r2, 0x0, 0x6) [ 2337.333447][T16134] FAULT_INJECTION: forcing a failure. [ 2337.333447][T16134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2337.346598][T16134] CPU: 0 PID: 16134 Comm: syz-executor.1 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2337.357626][T16134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2337.367758][T16134] Call Trace: [ 2337.371037][T16134] [ 2337.373965][T16134] dump_stack_lvl+0xd6/0x122 [ 2337.378576][T16134] dump_stack+0x11/0x12 [ 2337.382781][T16134] should_fail+0x242/0x250 [ 2337.387234][T16134] should_fail_usercopy+0x16/0x20 [ 2337.392267][T16134] _copy_to_user+0x1a/0x90 [ 2337.396743][T16134] simple_read_from_buffer+0xab/0x120 [ 2337.402122][T16134] proc_fail_nth_read+0x10d/0x150 [ 2337.407197][T16134] ? proc_fault_inject_write+0x230/0x230 [ 2337.412846][T16134] vfs_read+0x198/0x560 [ 2337.417011][T16134] ? __fget_files+0x1a7/0x1e0 [ 2337.421692][T16134] ksys_read+0xe8/0x1a0 [ 2337.425840][T16134] __x64_sys_read+0x3e/0x50 [ 2337.430370][T16134] do_syscall_64+0x2b/0x70 [ 2337.434837][T16134] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2337.440784][T16134] RIP: 0033:0x7f70be340e2c [ 2337.445300][T16134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2337.464948][T16134] RSP: 002b:00007f70bdae3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2337.474332][T16134] RAX: ffffffffffffffda RBX: 00007f70be4a1050 RCX: 00007f70be340e2c 17:26:53 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"c36dc288ac7e3e35"}}}, 0xc) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"c36dc288ac7e3e35"}}}, 0xc) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) 17:26:53 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) socketpair(0x21, 0x2, 0x20, &(0x7f0000000180)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x111348dc}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc9d6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000001c0)=0x40, 0x4) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0xffffffff, 0x10001, 0x6b, &(0x7f0000000080)="df33e7754b1583e1e04a5ca86fdb5272cf896801e391d994747fd905baa99b4b509593ab8c9e3cf948be1f0f53011b5eb7c68e0be93ede2914a56b1dd3dc490d55913c1433be718b44df9ce180a900a9fc660e998be0104078b653ffb2c3fd487d2c08c438330bf91acdb5"}) 17:26:53 executing program 3: r0 = socket$isdn(0x22, 0x3, 0x3) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x3, 0x80, 0x1, 0x4}, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x3ff) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, 0x0, 0x6) 17:26:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r1}) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb969}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004000) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6) 17:26:53 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x1000, 0x231, 0x1}) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x1000, 0x231, 0x1}) (async) 17:26:53 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"c36dc288ac7e3e35"}}}, 0xc) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 17:26:53 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) [ 2337.482379][T16134] RDX: 000000000000000f RSI: 00007f70bdae31e0 RDI: 0000000000000004 [ 2337.490343][T16134] RBP: 00007f70bdae31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2337.498365][T16134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2337.506323][T16134] R13: 00007ffe70dad66f R14: 00007f70bdae3300 R15: 0000000000022000 [ 2337.514327][T16134] 17:26:53 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x7, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @exit, @jmp={0x5, 0x0, 0x2, 0x5, 0x9, 0xffffffffffffffc0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x100, 0xe3, &(0x7f00000000c0)=""/227, 0x41100, 0x2, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x8, 0x2, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1]}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7, 0x7fff, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x1, 0xd8c, 0x9}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000000) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x5460, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x20048084) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x20, 0x1406, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 17:26:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x10, 0x3, 0xffffff35, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1d}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000034) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000780)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/54, 0x36}], 0x2}, 0x40002002) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r7, 0x10b}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17b6dfbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72119b76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66c87b93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e0352da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15bc672f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c473446}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 17:26:53 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:53 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) socketpair(0x21, 0x2, 0x20, &(0x7f0000000180)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x111348dc}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc9d6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x80) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000001c0)=0x40, 0x4) (async, rerun: 64) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0xffffffff, 0x10001, 0x6b, &(0x7f0000000080)="df33e7754b1583e1e04a5ca86fdb5272cf896801e391d994747fd905baa99b4b509593ab8c9e3cf948be1f0f53011b5eb7c68e0be93ede2914a56b1dd3dc490d55913c1433be718b44df9ce180a900a9fc660e998be0104078b653ffb2c3fd487d2c08c438330bf91acdb5"}) 17:26:53 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x3c}}, 0x48010) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="aa71990500"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x10000, 0x3, 0x20, 0x1, "8bfd4e3cc4a4ccf1afcc0689cd30de4803018523fe33f8d55697402851e233b5ef5dbd73f48d1eb29b09e479aabfe7945434372ccb119012dbaa0d83a9499cef", "1e110cefc8da255a28b04f47d0cf994a12c61a0c93de5640882b3065b9d72741", [0x400, 0x80000001]}) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:53 executing program 3: r0 = socket$isdn(0x22, 0x3, 0x3) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x3, 0x80, 0x1, 0x4}, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x3ff) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, 0x0, 0x6) socket$isdn(0x22, 0x3, 0x3) (async) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x3, 0x80, 0x1, 0x4}, 0x6) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x3ff) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r2, 0x0, 0x6) (async) 17:26:53 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x7, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @exit, @jmp={0x5, 0x0, 0x2, 0x5, 0x9, 0xffffffffffffffc0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x100, 0xe3, &(0x7f00000000c0)=""/227, 0x41100, 0x2, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x8, 0x2, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1]}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7, 0x7fff, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x1, 0xd8c, 0x9}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000000) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x5460, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x20048084) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x20, 0x1406, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x7, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @exit, @jmp={0x5, 0x0, 0x2, 0x5, 0x9, 0xffffffffffffffc0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x100, 0xe3, &(0x7f00000000c0)=""/227, 0x41100, 0x2, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x8, 0x2, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1]}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7, 0x7fff, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x1, 0xd8c, 0x9}}) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000000) (async) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOC_PR_REGISTER(r4, 0x5460, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x20048084) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x20, 0x1406, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async) 17:26:53 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x7, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @exit, @jmp={0x5, 0x0, 0x2, 0x5, 0x9, 0xffffffffffffffc0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x100, 0xe3, &(0x7f00000000c0)=""/227, 0x41100, 0x2, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x8, 0x2, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1]}, 0x80) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7, 0x7fff, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x1, 0xd8c, 0x9}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000000) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x5460, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x20048084) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x20, 0x1406, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 17:26:53 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='io.latency\x00', 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x14000040) 17:26:53 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) socketpair(0x21, 0x2, 0x20, &(0x7f0000000180)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x111348dc}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc9d6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x80) (async, rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000001c0)=0x40, 0x4) (rerun: 32) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0xffffffff, 0x10001, 0x6b, &(0x7f0000000080)="df33e7754b1583e1e04a5ca86fdb5272cf896801e391d994747fd905baa99b4b509593ab8c9e3cf948be1f0f53011b5eb7c68e0be93ede2914a56b1dd3dc490d55913c1433be718b44df9ce180a900a9fc660e998be0104078b653ffb2c3fd487d2c08c438330bf91acdb5"}) 17:26:53 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='io.latency\x00', 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x14000040) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000080)='io.latency\x00', 0x2, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x14000040) (async) 17:26:53 executing program 3: r0 = socket$isdn(0x22, 0x3, 0x3) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x3, 0x80, 0x1, 0x4}, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x3ff) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r2, 0x0, 0x6) 17:26:53 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x3c}}, 0x48010) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="aa71990500"], 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x10000, 0x3, 0x20, 0x1, "8bfd4e3cc4a4ccf1afcc0689cd30de4803018523fe33f8d55697402851e233b5ef5dbd73f48d1eb29b09e479aabfe7945434372ccb119012dbaa0d83a9499cef", "1e110cefc8da255a28b04f47d0cf994a12c61a0c93de5640882b3065b9d72741", [0x400, 0x80000001]}) (async) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async, rerun: 64) socketpair(0x10, 0x3, 0xffffff35, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1d}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000034) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (rerun: 32) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000780)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/54, 0x36}], 0x2}, 0x40002002) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r7, 0x10b}, 0x14}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17b6dfbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72119b76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66c87b93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e0352da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15bc672f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c473446}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 17:26:53 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:53 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0xff, [0x1, 0x6]}, 0x10) 17:26:53 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x40102) write$bt_hci(r1, 0x0, 0x6) 17:26:53 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='io.latency\x00', 0x2, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x14000040) (rerun: 32) 17:26:53 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x40102) write$bt_hci(r1, 0x0, 0x6) 17:26:53 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x40102) write$bt_hci(r1, 0x0, 0x6) 17:26:53 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x3c}}, 0x48010) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="aa71990500"], 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x10000, 0x3, 0x20, 0x1, "8bfd4e3cc4a4ccf1afcc0689cd30de4803018523fe33f8d55697402851e233b5ef5dbd73f48d1eb29b09e479aabfe7945434372ccb119012dbaa0d83a9499cef", "1e110cefc8da255a28b04f47d0cf994a12c61a0c93de5640882b3065b9d72741", [0x400, 0x80000001]}) (async) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:53 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x40080) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000080)=[@register_looper, @acquire={0x40046305, 0x1}], 0x78, 0x0, &(0x7f0000000140)="ca02e3fa6d5197cfc23de8c4be250d696eef9a3147c5dab8874517f351df36845cce2058d2f9178ba5d95ff6bd3c9f77456a293e0e91ec8ea882f818b8fba2312df2655492cc4518286bd0ccc34eb201e7bb24dc9a383e1dfd103bfb0ceea84432ba12802ff06b0b9cb20b7d97afe0859aef1690014a7f0d"}) write$bt_hci(r0, 0x0, 0x6) socket$l2tp6(0xa, 0x2, 0x73) 17:26:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) socketpair(0x10, 0x3, 0xffffff35, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1d}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000034) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000780)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/54, 0x36}], 0x2}, 0x40002002) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r7, 0x10b}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17b6dfbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72119b76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66c87b93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e0352da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15bc672f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c473446}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) socketpair(0x10, 0x3, 0xffffff35, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1d}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000034) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000780)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/54, 0x36}], 0x2}, 0x40002002) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r7, 0x10b}, 0x14}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17b6dfbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72119b76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66c87b93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e0352da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15bc672f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c473446}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) 17:26:53 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x82, 0x0) 17:26:53 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0xff, [0x1, 0x6]}, 0x10) 17:26:53 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x82, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x82, 0x0) (async) 17:26:53 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:53 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x82, 0x0) 17:26:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x3, 0x8, "00ac00", 0x5, 0x65}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:53 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0xff, [0x1, 0x6]}, 0x10) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0xff, [0x1, 0x6]}, 0x10) (async) 17:26:53 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x40080) (rerun: 64) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000080)=[@register_looper, @acquire={0x40046305, 0x1}], 0x78, 0x0, &(0x7f0000000140)="ca02e3fa6d5197cfc23de8c4be250d696eef9a3147c5dab8874517f351df36845cce2058d2f9178ba5d95ff6bd3c9f77456a293e0e91ec8ea882f818b8fba2312df2655492cc4518286bd0ccc34eb201e7bb24dc9a383e1dfd103bfb0ceea84432ba12802ff06b0b9cb20b7d97afe0859aef1690014a7f0d"}) (async) write$bt_hci(r0, 0x0, 0x6) (async) socket$l2tp6(0xa, 0x2, 0x73) 17:26:53 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xb2, &(0x7f00000002c0)=""/178, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x80, 0x20}, 0x10}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x9b}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0xc, 0x9, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff0}, @generic={0x3, 0x8, 0x0, 0xb05, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x1, 0x2, 0xa, 0x8, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0xbad5, 0x52, &(0x7f0000000100)=""/82, 0x40f00, 0xe23bddaa67d66476, '\x00', r2, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x5, 0x1, 0x7}, 0x10, 0x28152, r3, 0x0, &(0x7f0000000480)=[r0]}, 0x80) 17:26:53 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:53 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x40080) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000080)=[@register_looper, @acquire={0x40046305, 0x1}], 0x78, 0x0, &(0x7f0000000140)="ca02e3fa6d5197cfc23de8c4be250d696eef9a3147c5dab8874517f351df36845cce2058d2f9178ba5d95ff6bd3c9f77456a293e0e91ec8ea882f818b8fba2312df2655492cc4518286bd0ccc34eb201e7bb24dc9a383e1dfd103bfb0ceea84432ba12802ff06b0b9cb20b7d97afe0859aef1690014a7f0d"}) write$bt_hci(r0, 0x0, 0x6) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x40080) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000080)=[@register_looper, @acquire={0x40046305, 0x1}], 0x78, 0x0, &(0x7f0000000140)="ca02e3fa6d5197cfc23de8c4be250d696eef9a3147c5dab8874517f351df36845cce2058d2f9178ba5d95ff6bd3c9f77456a293e0e91ec8ea882f818b8fba2312df2655492cc4518286bd0ccc34eb201e7bb24dc9a383e1dfd103bfb0ceea84432ba12802ff06b0b9cb20b7d97afe0859aef1690014a7f0d"}) (async) write$bt_hci(r0, 0x0, 0x6) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) 17:26:53 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:53 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aa88c7207242"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="f0008bdcfdffffff0271c901666209"], 0x6) 17:26:53 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00010abd7000ffdbdf250600000008f53b00030000000529000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000040)=0x6e) 17:26:53 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xb2, &(0x7f00000002c0)=""/178, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x80, 0x20}, 0x10}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x9b}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0xc, 0x9, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff0}, @generic={0x3, 0x8, 0x0, 0xb05, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x1, 0x2, 0xa, 0x8, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0xbad5, 0x52, &(0x7f0000000100)=""/82, 0x40f00, 0xe23bddaa67d66476, '\x00', r2, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x5, 0x1, 0x7}, 0x10, 0x28152, r3, 0x0, &(0x7f0000000480)=[r0]}, 0x80) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xb2, &(0x7f00000002c0)=""/178, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x80, 0x20}, 0x10}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x9b}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0xc, 0x9, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff0}, @generic={0x3, 0x8, 0x0, 0xb05, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x1, 0x2, 0xa, 0x8, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0xbad5, 0x52, &(0x7f0000000100)=""/82, 0x40f00, 0xe23bddaa67d66476, '\x00', r2, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x5, 0x1, 0x7}, 0x10, 0x28152, r3, 0x0, &(0x7f0000000480)=[r0]}, 0x80) (async) 17:26:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x3, 0x8, "00ac00", 0x5, 0x65}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x3, 0x8, "00ac00", 0x5, 0x65}) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) [ 2338.256492][T16318] ================================================================== [ 2338.264632][T16318] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch [ 2338.273584][T16318] [ 2338.275903][T16318] read-write to 0xffff88810004b490 of 8 bytes by task 16314 on cpu 1: [ 2338.284049][T16318] percpu_counter_add_batch+0x9a/0x110 [ 2338.289524][T16318] shmem_getpage_gfp+0x4b3/0x1750 [ 2338.294548][T16318] shmem_write_begin+0x84/0x110 [ 2338.299401][T16318] generic_perform_write+0x1d4/0x3f0 [ 2338.304688][T16318] __generic_file_write_iter+0xe3/0x280 [ 2338.310255][T16318] generic_file_write_iter+0x79/0x1c0 [ 2338.315640][T16318] vfs_write+0x468/0x760 [ 2338.319900][T16318] ksys_write+0xe8/0x1a0 [ 2338.324141][T16318] __x64_sys_write+0x3e/0x50 [ 2338.328734][T16318] do_syscall_64+0x2b/0x70 [ 2338.333161][T16318] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2338.339074][T16318] [ 2338.341401][T16318] read to 0xffff88810004b490 of 8 bytes by task 16318 on cpu 0: [ 2338.349035][T16318] __percpu_counter_compare+0x27/0x1e0 17:26:53 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xb2, &(0x7f00000002c0)=""/178, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x80, 0x20}, 0x10}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x9b}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0xc, 0x9, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff0}, @generic={0x3, 0x8, 0x0, 0xb05, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x1, 0x2, 0xa, 0x8, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0xbad5, 0x52, &(0x7f0000000100)=""/82, 0x40f00, 0xe23bddaa67d66476, '\x00', r2, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x5, 0x1, 0x7}, 0x10, 0x28152, r3, 0x0, &(0x7f0000000480)=[r0]}, 0x80) 17:26:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x3, 0x8, "00ac00", 0x5, 0x65}) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) [ 2338.354501][T16318] shmem_getpage_gfp+0x47c/0x1750 [ 2338.359545][T16318] shmem_write_begin+0x84/0x110 [ 2338.364398][T16318] generic_perform_write+0x1d4/0x3f0 [ 2338.369689][T16318] __generic_file_write_iter+0xe3/0x280 [ 2338.375244][T16318] generic_file_write_iter+0x79/0x1c0 [ 2338.380627][T16318] vfs_write+0x468/0x760 [ 2338.384875][T16318] ksys_write+0xe8/0x1a0 [ 2338.389120][T16318] __x64_sys_write+0x3e/0x50 [ 2338.393717][T16318] do_syscall_64+0x2b/0x70 [ 2338.398141][T16318] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2338.404042][T16318] 17:26:53 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000480)=0xfffffffa, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x20000001) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7a76}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44841) 17:26:54 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00010abd7000ffdbdf250600000008f53b00030000000529000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000040)=0x6e) 17:26:54 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x400140) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$bt_hci(r0, 0x0, 0x6) 17:26:54 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:54 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x400140) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$bt_hci(r0, 0x0, 0x6) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x400140) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) write$bt_hci(r0, 0x0, 0x6) (async) [ 2338.406358][T16318] value changed: 0x00000000000051bb -> 0x00000000000051db [ 2338.413467][T16318] [ 2338.415791][T16318] Reported by Kernel Concurrency Sanitizer on: [ 2338.421936][T16318] CPU: 0 PID: 16318 Comm: syz-executor.5 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2338.433060][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2338.443127][T16318] ================================================================== 17:26:54 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x400140) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) write$bt_hci(r0, 0x0, 0x6) 17:26:54 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aa88c7207242"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="f0008bdcfdffffff0271c901666209"], 0x6) 17:26:54 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x109a03) write$bt_hci(r0, 0x0, 0x6) 17:26:54 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x7, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x10a, 0x3}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 17:26:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004014}, 0x4) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:54 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00010abd7000ffdbdf250600000008f53b00030000000529000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000040)=0x6e) 17:26:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async, rerun: 64) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000480)=0xfffffffa, 0x4) (rerun: 64) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x20000001) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7a76}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x80) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44841) 17:26:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004014}, 0x4) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004014}, 0x4) (async) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) (async) 17:26:54 executing program 0: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:54 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x109a03) write$bt_hci(r0, 0x0, 0x6) 17:26:54 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x7, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x10a, 0x3}) (async, rerun: 32) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (rerun: 32) 17:26:54 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x109a03) write$bt_hci(r0, 0x0, 0x6) 17:26:54 executing program 3: accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x189b00) accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000200)="cdc48e131a65526a54f3438b0cf48384e3b3069364a2947c95c55040", 0x1c, 0x48004, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) write$bt_hci(r0, 0x0, 0x6) 17:26:54 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aa88c7207242"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="f0008bdcfdffffff0271c901666209"], 0x6) 17:26:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004014}, 0x4) (async) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:54 executing program 3: accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) (async) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x189b00) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000200)="cdc48e131a65526a54f3438b0cf48384e3b3069364a2947c95c55040", 0x1c, 0x48004, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) write$bt_hci(r0, 0x0, 0x6) 17:26:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000480)=0xfffffffa, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x20000001) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7a76}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44841) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000480)=0xfffffffa, 0x4) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x20000001) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7a76}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x80) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44841) (async) 17:26:54 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x10a, 0x3}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 17:26:54 executing program 0: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:54 executing program 3: accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x189b00) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x0) (async) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000200)="cdc48e131a65526a54f3438b0cf48384e3b3069364a2947c95c55040", 0x1c, 0x48004, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) write$bt_hci(r0, 0x0, 0x6) 17:26:54 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0x8200) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140)={0x101, "efd965"}, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4084) 17:26:54 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x448d0}, 0x4000000) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109b02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaaabaaaa00"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01800000090057"], 0x6) 17:26:54 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) socket$unix(0x1, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:54 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x16400) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) write$bt_hci(r0, 0x0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) 17:26:54 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) socket$unix(0x1, 0x2, 0x0) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) 17:26:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01a8594ff63626d1aa00"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:54 executing program 0: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (rerun: 32) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_local_amp_assoc={{0x140a, 0x5}}}, 0x9) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) 17:26:54 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x16400) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) (async) write$bt_hci(r0, 0x0, 0x6) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) 17:26:54 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0x8200) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140)={0x101, "efd965"}, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4084) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0x8200) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140)={0x101, "efd965"}, 0x6) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4084) (async) 17:26:54 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x16400) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) write$bt_hci(r0, 0x0, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x16400) (async) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) (async) write$bt_hci(r0, 0x0, 0x6) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) (async) 17:26:54 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, 0x0, 0x6) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 17:26:54 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x448d0}, 0x4000000) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109b02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaaabaaaa00"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01800000090057"], 0x6) 17:26:54 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) socket$unix(0x1, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) socket$unix(0x1, 0x2, 0x0) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01667509"], 0x6) (async) 17:26:54 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0x8200) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140)={0x101, "efd965"}, 0x6) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4084) 17:26:54 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, 0x0, 0x6) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 17:26:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01a8594ff63626d1aa00"], 0xfffffdef) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:54 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x448d0}, 0x4000000) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x109b02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010c0406aaaaabaaaa00"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01800000090057"], 0x6) 17:26:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01a8594ff63626d1aa00"], 0xfffffdef) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="016675092a"], 0x6) 17:26:54 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x6aa02) 17:26:54 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="010a0000627efac8220cf10b74eaee1ddfaeb6042b59446e569709473c396b9aca0c1fa4bef5c26d7d3265056ef0491955539f6468186190b35418a43058fb3ead95bb513f7fd10000000000"], 0x9) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf250500000008001800ac1414aa06001c00060000001400080069703665727370616e3000000000000008001900000000000067594a9d4ed5b3d043284306738fe64dfabff8e0bda4fe9568619d9f7e4e8179f04fdc0bd65d091f5505cb304ac24dec85b4ef72b26b46b6ba85f8a659e4fa2e29e89829baaf2a191518476152c5e7772cc32d5acc52d8bb98f040082bc5c273cd161e08"], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4044844) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xfffffdef) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000080)) 17:26:54 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r1, 0x0, 0x6) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 17:26:54 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x100, 0x1403, 0x0, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x100}}, 0x40005) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x140f, 0x20, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x4044090) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='lS\x00'/13], 0x6) 17:26:54 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x6aa02) 17:26:54 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x228, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16dff0a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3353e640}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1261524d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb3e085c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41c2008e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31a27c8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x367d5ec7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x819b4e9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6741259d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60a9097d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1528dd7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e1b3a08}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26894860}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e25c0ca}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9e61cff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30cd112f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4667bdc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50fba27a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a79}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1231c8dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x112ed17e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7c7}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4001}, 0x4040800) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) 17:26:54 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x6aa02) 17:26:54 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x1410, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x0, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0xff0f, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x0, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) 17:26:54 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="010a0000627efac8220cf10b74eaee1ddfaeb6042b59446e569709473c396b9aca0c1fa4bef5c26d7d3265056ef0491955539f6468186190b35418a43058fb3ead95bb513f7fd10000000000"], 0x9) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf250500000008001800ac1414aa06001c00060000001400080069703665727370616e3000000000000008001900000000000067594a9d4ed5b3d043284306738fe64dfabff8e0bda4fe9568619d9f7e4e8179f04fdc0bd65d091f5505cb304ac24dec85b4ef72b26b46b6ba85f8a659e4fa2e29e89829baaf2a191518476152c5e7772cc32d5acc52d8bb98f040082bc5c273cd161e08"], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4044844) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xfffffdef) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000080)) 17:26:54 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000) r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x1410, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x0, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0xff0f, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x0, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000) (async) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x1410, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x0, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0xff0f, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x0, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x48a02) (async) 17:26:54 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x100, 0x1403, 0x0, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x100}}, 0x40005) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x140f, 0x20, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x4044090) (async) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='lS\x00'/13], 0x6) 17:26:54 executing program 1: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x228, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16dff0a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3353e640}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1261524d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb3e085c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41c2008e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31a27c8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x367d5ec7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x819b4e9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6741259d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60a9097d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1528dd7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e1b3a08}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26894860}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e25c0ca}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9e61cff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30cd112f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4667bdc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50fba27a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a79}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1231c8dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x112ed17e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7c7}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4001}, 0x4040800) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd}, 0x4000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x228, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16dff0a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3353e640}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1261524d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb3e085c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41c2008e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31a27c8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x367d5ec7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x819b4e9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6741259d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60a9097d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1528dd7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e1b3a08}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26894860}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e25c0ca}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9e61cff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30cd112f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4667bdc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50fba27a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a79}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1231c8dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x112ed17e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7c7}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4001}, 0x4040800) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x109a02) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed}}}, 0xfffffdef) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_SADDR={0x8}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4}}}, 0x6) (async)